0PricingLogin▼
Ethical Hacking Academy · Lesson

SUID and Sudo Abuse

Misconfigurations.

The SUID Bit

The SUID permission bit makes a file run with the privileges of its owner rather than the user who launched it. When the owner is root, a SUID binary executes as root — useful for tools like passwd, but dangerous if abused.

-rwsr-xr-x  1 root root  /usr/bin/passwd
# the s in rws = SUID bit

Finding SUID Binaries

Enumerate every SUID file and compare against a known-safe baseline. Anything unusual — a text editor, an interpreter, a custom binary — is a candidate.

find / -perm -4000 -type f 2>/dev/null

All lessons in this course

  1. Enumeration
  2. SUID and Sudo Abuse
  3. Cron Jobs and PATH
  4. Kernel Exploits
← Back to Ethical Hacking Academy