# SUID Treasure Hunt (CTF challenge)

> Launch the environment for a LIVE audit shell. Enumerate the box the way you would on a real engagement — hunt for setuid binaries and follow the lead.

Canonical: https://codelivly.com/ctf/challenges/suid-treasure-hunt

| | |
|---|---|
| Category | Linux Exploitation |
| Difficulty | Medium |
| Points | 900 |
| Estimated time | 35 min |
| Type | Live instance |
| Solves | 51 |
| Author | Codelivly |

Launch the environment for a LIVE audit shell. Enumerate the box the way you would on a real engagement — hunt for setuid binaries and follow the lead. One SUID helper the ops team left behind points at where the 'treasure' was backed up... and it was backed up world-readable. Find and read it. Enumeration only — the setuid bit here grants nothing (it's on a script, and the box has no-new-privileges); the finding is the misconfigured backup. Flag is unique to your instance.

## Related

- [All CTF challenges](https://codelivly.com/practice?type=ctf)