SUID Abuse

Linux machine chaining SNMP community-string enumeration, SSH password spraying, a world-writable cron script hijack, a Unix socket pivot, and a PATH-hijacked SUID binary for root.

Linux machine bypassing a SQL injection login, forging magic bytes to upload a PHP webshell, and hijacking a SUID binary’s relative-path lshw call for root.

Linux machine leaking SSH credentials over SNMP, exploiting a Pandora FMS SQL injection to hijack a session, chaining an event feature into command execution, and hijacking a SUID binary’s relative tar call for root.

Linux machine chaining a leaked custom header from an exposed .git repo, a phar-wrapper file upload bypass with disabled-function evasion, a Python 2 input() SUID exploit, and sudo easy_install for root.

Linux machine exploiting the UnrealIRCd 3.2.8.1 backdoor for a shell, steganography-hidden credentials for lateral movement, and a SUID binary’s relative-path execution for root.