Home / Labs / Weak Permissions

Weak Permissions

Permissions are the quiet way an attacker keeps their access. Hunt for the two patterns that show up on a compromised box: binaries that run as root without needing to, and files anyone on the machine can rewrite.

Open this lab

Commands practised here

• find . -perm -4000Files with the SUID bit: they run as their owner.
• find . -perm -o+wFiles any user on the machine can write to.
• chmod 4755 fileSets SUID. The 4 is the setuid digit.

Nearby labs

• All labsBrowse the full list.
• Exam prepWhich exams these objectives map to.
• Permission Audit
• Processes in Odd Places