- Enum kernel version ![[images/Pasted image 20260215185347.png]] - Identify SUID bins ![[images/Pasted image 20260215185338.png]] - `git clone` the exploit repo for `CVE-2022-0847` and serve up from Kali ![[images/Pasted image 20260215185513.png]] - `wget` on target and make script executable ![[images/Pasted image 20260215185642.png]] - run script > `gcc` not found on target ![[images/Pasted image 20260215185758.png]] - download `gcc` precompile bin on Kali and server up ```bash sudo wget https://gfortran.meteodat.ch/download/x86_64/releases/gcc-4.4.0.tar.xz ``` - `wget` the `gcc` precompile on target and extract ![[images/Pasted image 20260215193627.png]] ![[images/Pasted image 20260215193636.png]] - modify `compile.sh` to point to the absolute path for this precompiled bin ![[images/Pasted image 20260215193809.png]] - try to run the script again > more errors ![[images/Pasted image 20260215193856.png]]