Câu 14: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

During a system penetration test, a security engineer successfully gained access to a shell on a Linux host as a standard user and wants to elevate the privilege levels. Which of the following is a valid Linux post-exploitation method to use to accomplish this goal?

1. A. Spawn a shell using sudo and an escape string such as sudo vim -c '!sh'. — đáp án hiện tại
2. B. Perform ASIC password cracking on the host.
3. C. Read the /etc/passwd file to extract the usernames.
4. D. Initiate unquoted service path exploits.
5. E. Use the UNION operator to extract the database schema.