My website

One vector to escalate privileges is to make use of our low-priv user’s PATH, when we can write to a directory in the PATH. If we can find some binary or script that executes as root that makes use of PATH (rather than using absolute paths), we might be able... [Read More]

In this task of the Linux Privilege Escalation room the idea is that a low privilege user can check to see what manually scheduled jobs are listed in /etc/crontab (all users are able to read this file). If there’s any script there that is 1) run by root, and 2)... [Read More]

It’s time for some more privilege escalation! This time it’s about checking what binaries have SUID bit set. [Read More]

Nature of the Task [Read More]

Enumeration [Read More]