https://mrbeetrootpwn.com/tags/suid-abuse/Recent content in SUID Abuse on CyberSec WriteupsHugoen-usThu, 24 Sep 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hacksmarter/hsmart-banksmarter/Thu, 24 Sep 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hacksmarter/hsmart-banksmarter/Linux machine chaining SNMP community-string enumeration, SSH password spraying, a world-writable cron script hijack, a Unix socket pivot, and a PATH-hijacked SUID binary for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-magic/Thu, 19 Feb 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-magic/Linux machine bypassing a SQL injection login, forging magic bytes to upload a PHP webshell, and hijacking a SUID binary’s relative-path lshw call for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-pandora/Sat, 14 Feb 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-pandora/Linux machine leaking SSH credentials over SNMP, exploiting a Pandora FMS SQL injection to hijack a session, chaining an event feature into command execution, and hijacking a SUID binary’s relative tar call for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-updown/Fri, 23 Jan 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-updown/Linux machine chaining a leaked custom header from an exposed .git repo, a phar-wrapper file upload bypass with disabled-function evasion, a Python 2 input() SUID exploit, and sudo easy_install for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-irked/Wed, 17 Dec 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-irked/Linux machine exploiting the UnrealIRCd 3.2.8.1 backdoor for a shell, steganography-hidden credentials for lateral movement, and a SUID binary’s relative-path execution for root.