Headline

Rootend - A *Nix Enumerator And Auto Privilege Escalation Tool

<div class="separator" style="clear: both; text-align: center;"><a href="https://1.bp.blogspot.com/-dlBoxE4Rzf4/YT_yEy5Zt0I/AAAAAAAAul8/_6UiYaOb1IY1WJtM2lqSN0YfsC0TxvixACNcBGAsYHQ/s663/rootend.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="575" data-original-width="663" src="https://1.bp.blogspot.com/-dlBoxE4Rzf4/YT_yEy5Zt0I/AAAAAAAAul8/_6UiYaOb1IY1WJtM2lqSN0YfsC0TxvixACNcBGAsYHQ/s16000/rootend.png" /></a></div> rootend is a python *nix Enumerator & Auto <a href="https://www.kitploit.com/search/label/Privilege%20Escalation" target="_blank" title="Privilege Escalation">Privilege Escalation</a> tool. For a full list of our tools, please visit our website <a href="https://www.twelvesec.com/" rel="nofollow" target="_blank" title="https://www.twelvesec.com/">https://www.twelvesec.com/</a> Written by: <ul> <li><a href="https://github.com/nickvourd" rel="nofollow" target="_blank" title="nickvourd">nickvourd</a> (<a href="https://twitter.com/nickvourd" rel="nofollow" target="blank" title="twitter">twitter</a>)</li> <li><a href="https://github.com/maldevel" rel="nofollow" target="blank" title="maldevel">maldevel</a> (<a href="https://twitter.com/maldevel" rel="nofollow" target="blank" title="twitter">twitter</a>)</li> <li><a href="https://github.com/gbkaragiannidis" rel="nofollow" target="blank" title="servo">servo</a></li></ul><a name=’more’></a><div> </div>Usage <div class="snippet-clipboard-content position-relative" data-snippet-clipboard-copy-content="___________ . _________ _ / _ __ ____ | | __ ____ / _____/ ____ ____ | | \ / / // __ | |\ / // __ \ _____ _/ __ _/ \ | | \ /\ /| |\ /\ / / \ /\ _ |____| /_/ _ >____/_/ _ >_______ /_ >_ > / / / / / rootend v.2.0.2 - <a title=" enumeration="" href="https://www.kitploit.com/search/label/Enumeration">Enumeration & <a href="https://www.kitploit.com/search/label/Automation" target="blank" title="Automation">Automation</a> Privilege <a href="https://www.kitploit.com/search/label/Escalation" target="blank" title="Escalation">Escalation</a> tool. rootend is an open source tool licensed under GPLv3. Affected systems: *nix. Written by: @nickvourd of @twelvesec. Special thanks to @maldevel & servo. https://www.twelvesec.com/ Please visit https://github.com/twelvesec/rootend for more… optional arguments: -h, --help show this help message and exit -v, --version show version and exit -a, --auto automated privilege escalation process -m, --manual system enumeration -n, --nocolor disable color -b, --banner show banner and exit -s, --suid suid binary enumeration -w, --weak weak permissions of files enumeration -p, --php <a href="https://www.kitploit.com/search/label/PHP%20configuration" target="blank" title="PHP configuration">PHP configuration</a> files enumeration -c, --capabilities capabilities enumeration -f, --full-writables world writable files enumeration usage examples: ./rootend.py -a ./rootend.py -m ./rootend.py -v ./rootend.py -b Specific categories usage examples: ./rootend.py -a -s ./rootend.py -m -w ./rootend.py -a -s -p ./rootend.py -m -w -c -p ./rootend.py -a -s -c -p -f *Use the above arguments with -n to disable color. "><pre><code>___________ . _________ _ / _ __ ____ | | __ ____ / _____/ ____ ____ | | \ / / // __ | |\ / // __ \ _____ _/ __ _/ _\ | | \ /\ /| |\ /\ / / \ /\ _ |____| /_/ _ >____/_/ _ >_______ /_ >_ > / / / / / rootend v.2.0.2 - Enumeration & Automation Privilege Escalation tool. rootend is an open source tool licensed under GPLv3. Affected systems: *nix. Written by: @nickvourd of @twelvesec. Special thanks to @maldevel & servo. https://www.twelvesec.com/ Please visit https://github.com/twelvesec/rootend for more… optional arguments: -h, --help show this help message and exit -v, --version show version and exit -a, --auto automated privilege escalatio n process -m, --manual system enumeration -n, --nocolor disable color -b, --banner show banner and exit -s, --suid suid binary enumeration -w, --weak weak permissions of files enumeration -p, --php PHP configuration files enumeration -c, --capabilities capabilities enumeration -f, --full-writables world writable files enumeration usage examples: ./rootend.py -a ./rootend.py -m ./rootend.py -v ./rootend.py -b Specific categories usage examples: ./rootend.py -a -s ./rootend.py -m -w ./rootend.py -a -s -p ./rootend.py -m -w -c -p ./rootend.py -a -s -c -p -f *Use the above arguments with -n to disable color. </code></pre></div> Version 2.0.2 Supports <ul> <li>Python 2.x</li> <li>Python 3.x</li> </ul> Tested on <ul> <li>Python 2.7.18rc1</li> <li>Python 3.8.2</li> </ul> Modes <ul> <li>Manual</li> <li>Auto</li> </ul> Exploitation Categories Suid Binaries: <ul> <li>General Suids</li> <li>Suids for reading files</li> <li>Suids for creating file as root</li> <li>Limited Suids</li> <li>Custom Suids</li> </ul> Weak Permissions: <ul> <li>/etc/passwd</li> <li>/etc/shadow</li> <li>apache2.conf</li> <li>httpd.conf</li> <li>redis.conf</li> <li>/root</li> </ul> Weak Ownership: <ul> <li>/etc/passwd</li> <li>/etc/shadow</li> <li>apache2.conf</li> <li>httpd.conf</li> <li>redis.conf</li> <li>/root</li> </ul> Capabilities: <ul> <li>General Capabilities</li> <li>Custom Capabilities</li> <li>With CAP_SETUID</li> </ul> Interesting Files: <ul> <li>PHP Configuration Files</li> <li>World Writable Files</li> </ul> <div style="text-align: center;"><a class="kiploit-download" href="https://github.com/twelvesec/rootend" rel="nofollow" target="_blank" title="Download Rootend">Download Rootend</a></div>