Advanced · Feb 1, 2026

Privilege Escalation Patterns on Linux

From misconfigured sudo to writable service paths — pattern recognition for when you already have a foothold.

Offensive

Foothold is not the finish line.

Privilege escalation is pattern matching: weak file permissions, cron jobs running as root, credentials left in history, containers that share too much with the host.

Enumerate first. Exploit second. Always leave a clean lab trail so you can reverse the path and teach it later.

find / -perm -4000 -type f 2>/dev/null
sudo -l
ls -la /etc/cron*

Secure notes · XSS blocked

Lesson notes

Sign in through the Student Lab app to save plain-text notes. Markup and scripts are blocked in the browser and again on the server.

Checking session…