NEXT UP IS THE WINDOWS subsystem for Linux.
Now this was initially released in 2016 and allows you to run Linux on top of your Windows system.
So it's basically a subsystem.
So what this does is you can run into like a bunch to or even carry Linux right on top without having
to use a VM or anything else.
Now this does have some vulnerabilities to it.
If you could see here on our little cheat sheet from payload all the things we could see that with root
privileges it allows users to create a buying shell on any port with no elevation needed.
Don't know the root password.
No problem.
And here are some commands that we can run and we can run this w SSL.
Who am I.
It'll say hey we're root and then we can try to run a python type reverse shell.
Now this is a big hint for the box upcoming if you want to try it all the way through.
This is not actually going to work.
In fact we're going to utilize a little bit of Linux privilege escalation to get root on our machine.
So I'm doing this box to get you thinking about the windows subsystem for Linux in case you ever see
this and you're doing enumeration that pops up because this is in fact a way to escalate.
However it's not going to be fully there.
There's going to be a little bit of an alternate path to actually get a full system shell on the machine.
However keep in mind that the Bashar IAC exists and we're going to go into that as well.
So what we're going to do is we're going to run up a box called SEC notes S.E.C. notes and it lives
at 10 that ten not ten not ninety seven.
What I want you to do is go ahead and hit play get your box scan and give it a go see if you can get
a lower level privilege shell on this machine so catch me in the next video we're going to walk through
it and then we'll talk through the escalation.