← Learn
Dangerous
echo 'devs ALL=(ALL) NOPASSWD:ALL' | sudo tee /etc/sudoers.d/90-devs

linux · bash · Beginner

Grants a whole group password-free root on every command. Anyone in that group, and any process running as one of them, can become root silently and without re-authenticating.

Signals to notice

  • NOPASSWD:ALL removes the password check for every command
  • written into sudoers.d, so it persists across reboots

Think you can spot these under time pressure?

Start Training

More Privilege Escalation