← Learn
Dangerous
chmod 666 /etc/sudoers

cross-platform · bash · Beginner

Makes the sudo configuration file writable by every user on the system. Any local account can then grant itself password-free root by appending one line, and sudo may also refuse to run at all with permissions this loose.

Signals to notice

  • 666 lets any local user edit the file that defines who can become root
  • the file is the trust root for every sudo invocation on the host

Think you can spot these under time pressure?

Start Training

More Privilege Escalation