setuid

TryHackMe: Kenobi

Oct 27, 2024 13 min read tryhackme

Kenobi involves accessing an open Samba share and abusing a vulnerable version of ProFtpd to get a foothold on the machine, and then abusing a SUID binary to elevate privileges to root.

TryHackMe: Annie

Oct 21, 2024 5 min read tryhackme

This machine involved compromising a vulnerable AnyDesk installation and then abusing an uncommon SetUID binary to elevate privileges to root.