TryHackMe Privilege Escalation Medium

TryHackMe — Linux Privilege Escalation Techniques

Documentation of common Linux privilege escalation vectors including SUID binaries, cron jobs, PATH manipulation, and kernel exploits discovered during CTF challenges.

View on GitHub
Date

2025

Tools

4

Skills

4

Platform

TryHackMe

Overview

A comprehensive guide to common Linux privilege escalation techniques encountered during TryHackMe rooms and CTF challenges.

Techniques Covered

SUID Binaries

  • Finding SUID files: find / -perm -4000 2>/dev/null
  • Exploitation via GTFOBins
  • Custom SUID binary exploitation

Cron Jobs

  • Enumerating cron jobs
  • Writable cron scripts
  • PATH manipulation in cron

PATH Environment

  • PATH hijacking techniques
  • Exploiting relative path calls

Kernel Exploits

  • Kernel version enumeration
  • Known exploit matching
  • Compile and execution

Tools Used

  • LinPEAS: Automated privilege escalation enumeration
  • GTFOBins: Curated list of Unix binaries for privilege escalation
  • Linux Exploit Suggester: Kernel exploit matching