Get the Whitepaper called From Boot to Remote Root – How I owned the network.
You can download it from the following link: https://packetstormsecurity.com/files/download/74913/boottoroot.pdf
Source: https://packetstormsecurity.com/files/74913/From-Boot-To-Remote-Root.html