https://hekk.one/tags/suid/ Recent content in SUID on HEKK Hugo -- gohugo.io en info@hekk.one info@hekk.one © 2026 Sat, 22 Aug 2026 00:00:00 +0000 https://hekk.one/posts/offsec/pg_practice/deception/ Sat, 22 Aug 2026 00:00:00 +0000 info@hekk.one https://hekk.one/posts/offsec/pg_practice/deception/ WordPress enumeration revealed users and a hint leading to a split password. We combined it to gain SSH access, then exploited SUID /usr/bin/python2.7 to escalate privileges to root. https://hekk.one/posts/offsec/pg_practice/scarecrow1.1/ Sat, 22 Aug 2026 00:00:00 +0000 info@hekk.one https://hekk.one/posts/offsec/pg_practice/scarecrow1.1/ Used XXE and PHP wrappers to read files/source code, bypassed the upload blacklist with a PHP reverse shell for initial access, then exploited SUID find to escalate privileges to root. https://hekk.one/posts/offsec/pg_practice/confusion/ Thu, 20 Aug 2026 00:00:00 +0000 info@hekk.one https://hekk.one/posts/offsec/pg_practice/confusion/ A Cacti HTTPS exploit is adapted for RCE. Database credentials enable lateral movement to james, who can modify /usr/local/sbin/systeminfo and run it as root via doas, enabling privilege escalation.