skills.rest
blacklanternsecurity
blacklanternsecurityOFFICIAL
Explore all skills by this author →
WebsiteGitHub

linux-cron-service-abuse

Exploit Linux cron jobs, systemd services, D-Bus, and Unix sockets for privilege escalation.

253|37|Updated Feb 22, 2026
Search Tags:#linux#privilege escalation#cron#systemd#dbus#unix sockets#pwnkit
One-click install
npx skills add https://github.com/blacklanternsecurity/red-run --skill linux-cron-service-abuse
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: linux-cron-service-abuse
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/privesc/linux-cron-service-abuse
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill linux-cron-service-abuse

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you gain higher privileges on a Linux system by exploiting misconfigurations in scheduled tasks, system services, and inter-process communication mechanisms.

Core Features & Use Cases

  • Cron Job Exploitation: Leverages writable scripts, PATH manipulation, and wildcard injection in cron jobs.
  • Systemd Service Abuse: Modifies or replaces systemd service files and binaries for privilege escalation.
  • D-Bus Exploitation: Exploits vulnerable D-Bus services and PolicyKit flaws (like PwnKit).
  • Unix Socket Abuse: Leverages writable Unix sockets, including the Docker socket, for elevated access.
  • Use Case: A penetration tester finds a cron job running as root that executes a script they can write to. They modify the script to create a SUID binary of bash, allowing them to gain a root shell.

Quick Start

Use the linux-cron-service-abuse skill to enumerate cron jobs and systemd timers on the target system.

Frequently Asked Questions about linux-cron-service-abuse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I exploit writable cron jobs for Linux privilege escalation?▼

Writable cron job exploitation modifies root-executed scripts to spawn SUID binaries or manipulate PATH variables. Targeting misconfigured scheduled tasks allows elevation through wildcard injection and script replacement.

Can I abuse systemd services to gain root privileges on Linux?▼

Systemd service abuse replaces or modifies service files and binaries to execute malicious commands. Exploiting writable service configurations grants elevated execution privileges during system startup or service restarts.

How does D-Bus exploitation work for privilege escalation?▼

D-Bus exploitation targets vulnerable inter-process communication interfaces and PolicyKit flaws like PwnKit. Calling insecure D-Bus methods with elevated permissions bypasses access controls to execute arbitrary root commands.

What is the best way to escalate privileges using writable Unix sockets?▼

Writable Unix socket abuse leverages insecure socket permissions, including the Docker socket, for elevated access. Connecting to exposed sockets bypasses standard authentication to execute privileged container commands.

Do I need shell access to exploit Linux cron and service misconfigurations?▼

Yes, exploiting Linux cron, systemd, and D-Bus misconfigurations requires existing shell access on the target system. Successfully executing privilege escalation vectors depends on specific local vulnerabilities and misconfigured file permissions.

Related Skills

Explore More Software Engineering Skills→
AeonDaveAeonDave
15

linpeas

Automate privilege escalation vector enumeration on Linux and macOS systems.

Community
Intermediate
zebbernzebbern
4.5k

Windows Privilege Escalation

Enumerate Windows privileges and misconfigurations to identify privilege escalation vectors.

Community
Advanced
bpnrockstarbpnrockstar

hunt-rce

Automate detection, enumeration, and exploitation simulation of RCE vulnerabilities in web applications.

Community
Advanced
AndyAnh174AndyAnh174

Linux Privilege Escalation

Enumerate Linux system configurations and exploit vulnerabilities to escalate privileges.

Community
Advanced