saint-graves/sica-fondt
1
0
Fork 0
mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 08:30:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
sica-fondt/knowledge/cyber-skills/skills/performing-privilege-escalation-on-linux/references/api-reference.md
Claude 24f816b6a3
Consolidate 22 sibling repos into layered organism structure 
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2026-06-10 06:53:01 +00:00

1.8 KiB
Raw Blame History

API Reference — Performing Privilege Escalation on Linux

Libraries Used

  • subprocess: Execute system enumeration commands (sudo, find, getcap, crontab)
  • os: Check file writability with os.access()
  • pathlib: File system navigation
  • re: Pattern matching for cron script paths

CLI Interface

python agent.py sysinfo
python agent.py sudo
python agent.py suid
python agent.py writable
python agent.py cron
python agent.py caps
python agent.py full

Core Functions

enumerate_system_info() — Kernel, user, architecture info

check_sudo_permissions() — Sudo privilege analysis

Checks sudo -l output against 30+ GTFOBins-exploitable binaries. Detects NOPASSWD entries and full sudo access.

find_suid_binaries() — SUID/SGID binary enumeration

Identifies binaries with SUID bit set. Cross-references GTFOBins database.

check_writable_files() — Sensitive writable file detection

Checks: /etc/passwd, /etc/shadow, /etc/sudoers, /etc/crontab, /root, cron dirs.

check_cron_jobs() — Cron job privilege escalation vectors

Identifies writable scripts called from cron jobs (CRITICAL finding).

check_capabilities() — Linux capability enumeration

Flags: cap_setuid, cap_setgid, cap_sys_admin, cap_dac_override, cap_net_raw.

full_enumeration() — Combined analysis

GTFOBins SUID Exploitable Binaries (subset)

vim, find, bash, python, perl, nmap, env, tar, docker, strace, gdb, pkexec

Dangerous Sudo Patterns

Pattern Severity Vector
(ALL) NOPASSWD: /usr/bin/vim CRITICAL Shell escape
(ALL : ALL) ALL CRITICAL Full root access
NOPASSWD: /usr/bin/find CRITICAL -exec escalation

Dependencies

No external packages — Python standard library only. System: find, getcap, sudo, crontab