SSSD Privilege Escalation

SSSD (System Security Services Daemon) provides a set of daemons to manage access to remote directory services and authentication mechanisms.

Find Credentials

ls -la /var/lib/sss/

# Find credentials
# If we find the hash, crack it using John or Hashcat.
strings /var/lib/sss/db/example.ldb