# PrivEsc Audit — Find the Root Path (CTF challenge)

> You have a low-privileged shell as 'www' on a compromised host. You're given the recon output — sudo -l, SUID binaries and cron. Exactly one item lets you escalate to root.

Canonical: https://codelivly.com/ctf/challenges/privesc-audit

| | |
|---|---|
| Category | System Security |
| Difficulty | Hard |
| Points | 800 |
| Estimated time | 25 min |
| Type | Live instance |
| Solves | 21 |
| Author | Codelivly |

You have a low-privileged shell as 'www' on a compromised host. You're given the recon output — sudo -l, SUID binaries and cron. Exactly one item lets you escalate to root. Identify the escalation vector (the binary/command) and submit it to get the flag. This is an ANALYSIS challenge: a real root escalation can't run inside the isolated CTF container, so you demonstrate that you can spot the vector.

## Related

- [All CTF challenges](https://codelivly.com/practice?type=ctf)