> For the complete documentation index, see [llms.txt](https://darshan-2.gitbook.io/penetration-testing-checklist/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://darshan-2.gitbook.io/penetration-testing-checklist/linux-privilege-escalation/kernel-exploits.md).

# Kernel Exploits

The kernel communicates between memory and system applications, to perfom these tasks the kernel requires root privileges, therefore exploiting the kernel might give us the root privileges

**How to perform?** 

1 Identify the kernel version  - You will find the version in the initial Enumeration phase\
2 Search and find a suitable exploit for the kernel\
3 Run the exploit

Commands to find the kernel version

```
uname -a
```

```
cat /proc/version
```

**Where to look for the exploits?**

1 Google for an existing exploit code\
2 Exploit-db\
3 searchsploit\
4 Source - [ https://www.linuxkernelcves.com/cves](< https://www.linuxkernelcves.com/cves>)\
5 Running script like Linux Exploit Suggester (LES)

{% hint style="info" %}
These scripts generate false results as well&#x20;
{% endhint %}