Everything that starts with a methodology has an approach to a problem solution. In this section, we will go through the common escalation methodology utilized by attackers during a red teaming exercise, or penetration testing. The following diagram depicts the methodology that can be used:
As per the kill-chain methodology, the action of the objective includes the escalation of privilege to main persistence to the target environment.
The following steps are involved in gaining access to any typical target system:
- Normal user: Typical access through a backdoor runs at the level of the user who executes the backdoor. These are the normal users of the system (Windows or Unix).
- Local administrator: Local administrators are the system accounts that have the privilege to run system configuration changes.
- Delegated administrator: Delegated...
