Linux Hacking Case Studies Part 5: Building a Vulnerable Linux Server

NetSPI releases Dockerized Linux hacking labs: vulnerable images with a Metasploit attacker container let learners safely practice exploiting misconfigured services like Rsync.

This Linux case study covers finding SSH servers, running dictionary attacks against weak passwords, then abusing overly permissive sudo rules on sh, vi, python, and nmap to escape to a root shell.

Walks through attacking insecure phpMyAdmin installs: finding exposed instances, dictionary-attacking weak passwords, uploading webshells, then pivoting to world-writable cron scripts for escalation.

Attacks misconfigured NFS exports: enumerating and mounting shares, spoofing UIDs to read protected files, and hunting setuid binaries to reach root, with a note on root squashing.

The first Linux case study targets insecure Rsync servers: enumerating shares on port 873, grabbing sensitive files, and creating a privileged user via shadow edits when the daemon runs as root.

NetSPI U alumni share their experience breaking into a career in cybersecurity and advice on how to get started as a pentester.