Writable /etc/passwd
A writable account database is root if you preserve the format and authenticate correctly.
Confirm whether the active /etc/passwd file is writable, generate a valid password hash, append a root-equivalent account, and use it to prove impact.
Seeded variants change the permission shape and include backups or shadow-file distractions, forcing you to edit the active account database.
What you'll practice
/etc/passwdlinux privilege escalationpassword hashOSCP
medium
Writable /etc/passwd
A writable account database is root if you preserve the format and authenticate correctly.
Objective
Recover the flag at /root/flag.txt and submit it.
Drill this now
Spin up a live isolated target and start practicing in seconds — free.