Penetration Testing Operating Systems: Exploiting Vulnerabilities

The safeguarding of critical data stored on devices such as phones, computers, and tablets against unauthorized access has emerged as a central concern in modern society. Along with the increasing reliance on these devices for both productivity and personal affairs, the protection of the vast collections of sensitive information becomes crucial. Information safety against unauthorized access is a critical area in cybersecurity which is addressed through the discipline of penetration testing. This practice involves security researchers simulating adversarial attacks to evaluate the defenses of various technological systems, including web applications, operating systems, and networks, with the goal of protecting sensitive data from malicious actors. This research specifically focuses on the study of penetration testing operating systems without requiring login credentials, employing techniques such as command combinations in languages like BASH within the terminal to gain access to administrative accounts. Our further studies explore the performance of emulating keystrokes when these command combinations are used in conjunction with penetration testing devices, such as a USB Rubber Ducky, focusing on optimizing speed and efficiency. This research uncovers significant security vulnerabilities that, if exploited, could result in severe consequences not only for individual devices but also for entire networks and critical infrastructures, including core businesses, healthcare systems, schools, and government agencies. By identifying and mitigating these vulnerabilities, we contribute to strengthening security protocols, such as implementing system administration enhancements that prevent unauthorized access to the root terminal. In this way, our work bolsters efforts to protect digital systems against evolving cyber threats, ensuring the safety and integrity of both individual and collective digital operations.