Linux Privilege Escalation
Pivot from a low-privileged shell to full root access.
Enumerate the host, chain Linux misconfigurations, and document the shortest path to root without burning the box.
+250 XP
Capture the flag
Root flag, escalation notes, and a cleanup checklist.
Launch Mission
Public testers can step into the live browser sandbox immediately. The launch path now runs as a checkpoint mission loop with verification, reward drops, and sealed future stages.
Boss Fight
Capture the flag
Member Route
/app/labs/linux-privilege-escalation
Validate your foothold
Read the exact shell identity first so every later privilege clue has a clean baseline.
Check delegated sudo rights
This host leaks a direct escalation path through one mis-scoped sudo rule.
Abuse the misconfiguration
The goal is not just to run a command. It is to preserve a privileged shell that survives the escalation jump.
Verify effective UID 0
Prompt changes can lie. Identity output is the clean proof that the escalation really worked.
Capture the flag
Finish with the proof artifact so the run can be reported and compared later.
Completion Unlock
Root flag, escalation notes, and a cleanup checklist.
Map SUID and sudo abuse paths quickly.
Validate cron and service hijacks without guesswork.
Translate shell findings into a recruiter-friendly lab proof.
Why This Mission Matters
Map SUID and sudo abuse paths quickly.
Continuity
Sign in after launch to preserve notes, checkpoints, streaks, and your recruiter-facing proof history.