Challenge · Easy

Open Door

An audit found three ways for any user on this box to become root. Close all three without breaking the nightly cleanup job.

suidpermissionscronleast privilege

Practises the module Hardening a Linux server.

The ticket

AUDIT FINDING SEC-118 (high)

A pentester logged in as the low-privilege user intern and became root in under a minute. Their report lists three issues: an unexpected SUID binary, a root cron job that runs a script anyone can edit, and a password hash file that anyone can read.

Start the challenge →