Using files with SUID permission set
What is SUID?
Set owner User ID, also known as Set user ID or setuid is a special flag in linux permission set.
Find files with SUID set
systemctl
Reverse shell to root user
Modifying /etc/passwd with write access
With a user that has write access to /etc/passwd
file, we can add a new user credentials and gain root user access.
Generate a new password hash using the username as salt, here we are going to use
new
as a salt and123
as our password.
Next copy the hash generated, change the following entry and enter it into the
/etc/passwd
file's end. Remember to change new with your selected username.
Now we use the following command and supply our password to gain root access.
Last updated