Capture the FlagMedium
The Unexpected SUID
Lab for File Permissions in Depth: Octal, SUID, SGID & the Sticky Bit
Scenario
A box is only as safe as its permission bits. Someone dropped a custom SUID binary into /usr/local/bin, exactly the kind of thing an attacker hunts for. Enumerate every SUID file, find the odd one out, and pull the readable strings out of it.
Objective
Enumerate SUID binaries, spot the one that doesn't belong, and read the flag inside it.
lab ~ the unexpected suidnothing real runs
booting lab sandbox…
This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.