01 — Linux intermediate map

Learning objectives

• Abuse cron / timers / writable service scripts without blind LinPEAS paste
• Triage kernel suggestions safely (version → advisory → lab-only exploit decision)
• Harvest and reuse SSH keys / agent / known_hosts as a pivot idea (tie to F5-I later)
• Write a short OPSEC note: what was loud vs quiet on each box

Intuition

Beginner asked “what is misconfigured?” Intermediate asks “what keeps running / what trusts me / what can I chain?” Still one primary objective per box.

Intermediate path

1. Re-skim architecture — processes, memory, disk ACLs
2. AI3 Cron & service abuse [Intermediate]
3. AI4 Kernel ID — identify first, execute only if path is clear and authorized
4. AI5 SSH pivoting & key harvesting [Intermediate] — concepts; full tunnels → F5-I
5. Use PrivEsc deep dive as reference, not a cover-to-cover read
6. Labs

Park for later (operator)