2026-02

Linux Privesc

SSH Key Hunting and Lateral Movement on Linux

Find SSH private keys, abuse authorized_keys and known_hosts, and pivot via agent forwarding across Linux hosts.
Linux Privesc

Python Library Hijacking for Privilege Escalation on Linux

Abuse writable modules, PYTHONPATH, and sys.path ordering to hijack imports in privileged Python scripts and escalate to root.
Linux Privesc

Linux Persistence Techniques: Maintaining Access After Initial Compromise

A practical tour of Linux persistence: authorized_keys, cron, systemd, rc.local, and ld.so.preload, plus detection.
Security

Remote File Inclusion (RFI) Fundamentals: From allow_url_include to RCE

Learn how Remote File Inclusion abuses PHP wrappers and allow_url_include to achieve remote code execution, plus blue-team defenses.