🖥️System SecurityHard 800 XP 21 solves 25 min

PrivEsc Audit — Find the Root Path

by Codelivly

You have a low-privileged shell as 'www' on a compromised host. You're given the recon output — sudo -l, SUID binaries and cron. Exactly one item lets you escalate to root. Identify the escalation vector (the binary/command) and submit it to get the flag. This is an ANALYSIS challenge: a real root escalation can't run inside the isolated CTF container, so you demonstrate that you can spot the vector.

#privilege-escalation#linux#gtfobins#analysis#intermediate

DifficultyHard

Live Environment

Ready

Spin up your own private, isolated instance of this challenge.

Auto shutdown after 60 minutes
Isolated sandbox
Captured flags are saved independently of the environment
One-click restart

Submit Flag

Hints

Unlocking any hint — including free ones — forfeits the +25% no-hint solve bonus.

Hint 1

Hint 2

Hint 3

Challenge List

Frequently Asked Questions

What is Linux privilege escalation?

It is gaining higher privileges, often root, from a limited account by abusing misconfigurations such as unsafe sudo rules, SUID binaries, weak permissions or scheduled tasks.

How do you audit for privilege escalation paths?

Review sudo -l, SUID files, writable scripts, cron jobs and capabilities, then check candidates against references such as GTFOBins.

Is PrivEsc Audit free?

Yes. It is an analysis challenge on Codelivly with no cost, where you read provided output and reason about the safest and riskiest findings.

NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a labCodelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us