Day 9: Understanding Privilege Escalation & SUID Mechanics 🛡️

Source: Dev.to

Day 9 of my #1HourADayJourney. Today I moved into advanced system security. If you are managing servers or databases, understanding how privileges are delegated—and how they can be exploited—is essential for hardening your environment.

The Security Auditor’s Toolkit

UID vs. Effective UID

Real UID: The user who logged in.
Effective UID: The privilege level the process uses while running.

Why it matters: The kernel makes security decisions based on the Effective UID.

The Dangers of SUID

The SUID bit allows a program to run with the permissions of the file owner (often root) instead of the user running it.

# An SUID binary looks like this:
-rwsr-xr-x 1 root root /usr/bin/passwd
# The Risk: If a binary with the SUID bit has a bug (like a buffer overflow),
# an attacker can exploit it to spawn a shell with the owner's privileges (e.g., root).

Cron Job Vulnerabilities

One of the most common escalation vectors:

Pattern: Writable script + Root execution = Privilege Escalation.

Mindset Shift: Never assume a script is safe just because it’s in a system directory. If your user account has write access to a file that root executes, your account is effectively root.

Follow my journey: #1HourADayJourney