> For the complete documentation index, see [llms.txt](https://pentest.mxhx.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentest.mxhx.org/06-linux-privesc/5-looting.md).

# 5 Looting

## After root

1. dump **etc/shadow**
2. check **/var/mail**
3. Cheat sheet: <https://xapax.gitbooks.io/security/content/tcp-dumps_on_pwnd_machines.html>

<https://xapax.github.io/security/>\
<https://xapax.github.io/security/#post_exploitation/privilege_escalation_-_linux/>

<https://github.com/mubix/post-exploitation-wiki>