Home Linux Privilege Escalation Writable /etc/passwd
medium Live now Linux · Privilege Escalation

Writable /etc/passwd

A writable account database is root if you preserve the format and authenticate correctly.

Confirm whether the active /etc/passwd file is writable, generate a valid password hash, append a root-equivalent account, and use it to prove impact.

Seeded variants change the permission shape and include backups or shadow-file distractions, forcing you to edit the active account database.

What you'll practice

/etc/passwdlinux privilege escalationpassword hashOSCP
drill workspace · session live
medium

Writable /etc/passwd

A writable account database is root if you preserve the format and authenticate correctly.

Objective

Recover the flag at /root/flag.txt and submit it.

Drill this now

Spin up a live isolated target and start practicing in seconds — free.

Start drilling