The Hidden Dangers of Sudo

on YouTube ↗43m

" summary

Misconfigured sudo entries let regular accounts become root through ordinary tools and a writable script: live demos show shell escapes from editor escapes (vim nano less), namespace root via ip netns escalation and leaking files with date and command substitution, plus a user-owned script that gets replaced to run arbitrary root actions. Protections are concrete: tighten sudo command and option lists, fix file ownership/permissions, prefer group access, and audit sudoers regularly.

AI-written summary · about

" chapters (16)

1. 0:00Sudo dangers introduction
2. 1:11Sudo configuration importance
3. 3:01What sudo is
4. 7:02Sudo config files
5. 8:34Configuring sudo commands
6. 10:21What is privilege escalation
7. 12:34Real privilege escalation
8. 15:29Tools for privilege escalation
9. 16:54Vim/nano editor risks
10. 22:23Less command risks
11. 26:29IP command misuse
12. 29:47Date command tricks
13. 32:19Custom scripts dangers
14. 38:14Preventing sudo abuse
15. 40:25Responsible sudo use
16. 40:47Q&A on sudo

" related talks

• 04mSudon’t or going rootlessOri Pekelman · dotSecurity 2016
• 39mSudo For Defense: How can new or lesser-known features help you?Peter Czanik · All Things Open 2020
• 01h 00mDemonstrating Binary ExploitationMarit Iren, Christian Resell · NDC Oslo 2021
• 58mDemonstrating binary exploitationChristian Resell, Marit Iren Rognli Tokle · NDC TechTown 2021
• 22mDemostrating Binary ExploitationChristian Resell, Marit Iren Rognli Tokle · NDC Security 2022
• 40mDevOoops (Increase awareness around DevOps infra security)Gianluca Varisco · Codemotion Milan 2015
• 36mmacOS Vulnerabilities Hiding in Plain SightCsaba Fitzel · Black Hat Asia 2022
• 39mHow to think like a hackerEmil Sundstedt · Øredev 2025