identify-services

Check Installed packages

dpkg -l

Check listening services

netstat -antp | grep listen

Cron job abuse

Find any writable file or con jobs

find / -path /proc -prune -o -type f -perm -o+w 2>/dev/null

Confirm a cron job is running (python)

./pspy64 -pf -i 1000

Get a reverse shell

• Modify writable file

• Setup listener

• Get reverse shell as root