← Learn
Dangerous
chmod u+s /usr/bin/find

linux · bash · Expert

Sets the setuid bit on find, so any local user running it executes as root. find can launch other programs through -exec, which turns this one permission bit into a general-purpose root shell for everyone on the box.

Signals to notice

  • Setuid bit on a binary that can execute other programs
  • Grants root to every local user
  • Persists until explicitly reverted

Think you can spot these under time pressure?

Start Training

More Privilege Escalation