Tag
medium
advisory
Abuse of Linux xclip for Clipboard Data Interception
1 rule 1 TTPAdversaries leverage the Linux xclip command-line utility to intercept or exfiltrate sensitive information stored in the system clipboard.
living-off-the-land
clipboard-collection
linux-security
e-r-d-telemetry
1r
1t
medium
advisory
Potential Privilege Escalation via SUID/SGID Proxy Execution on Linux
1 rule 4 TTPsAttackers may exploit SUID/SGID binaries like pkexec, su, or sudo on Linux systems to execute commands with elevated privileges, by identifying instances where a process runs with root privileges (user ID 0 or group ID 0) while the real user or group ID is non-root, allowing a low-privilege foothold to gain full system control.
su +17
privilege-escalation
linux-security
defense-evasion
persistence
system-exploitation
1r
4t