Compile malicious binary using vulnerable SUID
Tactic: Privilege-escalation
After identifying SUID binaries, we are able to compile and modify
permissions of the binary to allow it to execute as root.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.
LoginTest this TTP
Download Operator (1.7.1)
Test this TTP using one of our Operator chainsEmulate Sandworm privileged persistence from a campaign targeting Centreon systems
GTsST Sandworm Team
2022-06-07
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github