🐧Linux ExploitationMedium 900 XP 51 solves 35 min

SUID Treasure Hunt

by Codelivly

Launch the environment for a LIVE audit shell. Enumerate the box the way you would on a real engagement — hunt for setuid binaries and follow the lead. One SUID helper the ops team left behind points at where the 'treasure' was backed up... and it was backed up world-readable. Find and read it. Enumeration only — the setuid bit here grants nothing (it's on a script, and the box has no-new-privileges); the finding is the misconfigured backup. Flag is unique to your instance.

#linux#suid#enumeration#privilege-audit#interactive-shell#medium

DifficultyMedium

Live Environment

Ready

Spin up your own private, isolated instance of this challenge.

Auto shutdown after 60 minutes
Isolated sandbox
Captured flags are saved independently of the environment
One-click restart

Submit Flag

Hints

Unlocking any hint — including free ones — forfeits the +25% no-hint solve bonus.

Hint 1

Hint 2

Hint 3

Challenge List

Frequently Asked Questions

What is a SUID binary?

A SUID file runs with the privileges of its owner rather than the user who launches it. When the owner is root and the program is unsafe, it can become a route to privilege escalation.

How do you find SUID files on Linux?

Run find / -perm -4000 -type f 2>/dev/null to list files with the setuid bit set. Then review each result for programs that should not normally have it.

Is the SUID Treasure Hunt free?

Yes. It is a medium-level Linux challenge on Codelivly that runs in an interactive shell in your browser, with no setup or cost.

NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a labCodelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us