← Learn
Dangerous
echo "deploy ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/99-deploy

linux · bash · Advanced

Grants an account passwordless root for every command, permanently. Dropping a file into sudoers.d is the supported way to extend sudo, which is what makes this look like configuration management rather than a backdoor.

Signals to notice

  • Grants unrestricted NOPASSWD root
  • Written to a persistent sudoers drop-in
  • Survives reboots and user password changes

Think you can spot these under time pressure?

Start Training

More Privilege Escalation