L-SUDO-MISCONFPrivilege Escalation

Sudo Misconfiguration (NOPASSWD / weak Defaults)

Sudo rule permitting a binary that can shell out (vi, less, awk, perl, python) without password — root shell.

§ Where this technique fits

L-SUDO-MISCONF is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 3 on average.

§ Dossiers chaining this technique

sudo NOPASSWD on a shell-spawner → root
User has sudo NOPASSWD on a binary that can shell out (vi, less, awk, perl, python). Use the binary's escape sequence to drop into a root shell.
step 3 / 5

§ What commonly comes next

01
Command and Scripting Interpreter
T1059 · Execution
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

sudo NOPASSWD on a shell-spawner → root

§ What commonly comes next