Wrapping Up
Considering the significant Linux's install base
security professionals must understand the potential threats against these systems
In this module, we’ve examined a subset of these potential attack vectors.
We discussed methods of exploiting user configuration files and
targeted VIM as a case study.
We also discussed basic antivirus bypass on Linux
using Kaspersky Endpoint Security
and the suite of antivirus scanners represented at
antiscan.me as targets.
We then discussed several approaches to shared library hijacking
These included the use of the LD_LIBRARY_PATH environment variable
and LD_PRELOAD.
This demonstrates that a working knowledgeof the weaknesses
that may affect Linux systems
can assist offensive security professionals
in conducting assessments against these
and similar targets.