--- title: "#privilege-escalation articles | Hashnode" description: "Explore 143 articles tagged #privilege-escalation on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/privilege-escalation" --- Tag # #privilege-escalation 143 posts · 1 followers [404 Founders](https://hashnode.com/@404-founders) · [Oct 27](https://hashnode.com/posts/tailworm-tailscale-ssh-root-escalation/6ae1f134b27ef2f6bbdf6d2a) ### [Tailworm: Eleven Tailscale Flaws and the Year of Root](https://404-founders.com/blog/tailworm-tailscale-ssh-root-escalation?utm_source=hashnode&utm_medium=feed) Tailscale patched five security bugs in SSH and Serve between June and July 2026. On 25 October, a researcher dropped eleven more. Erica Windisch of Cyberdione Labs published a report called Tailworm 11 min read · [404-founders.com](https://404-founders.com/blog/tailworm-tailscale-ssh-root-escalation?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Oct 7](https://hashnode.com/posts/tryhackme-seasurfer-writeup/6ac62062bef3e29f7cefc1f4) ### [TryHackMe - SeaSurfer writeup](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) Complete Sea Surfer TryHackMe writeup covering vhost enumeration, SSRF, LFI, WordPress RCE, tar wildcard injection, and SSH agent privilege escalation 15 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Oct 6](https://hashnode.com/posts/mikrotrick-routeros-ssh-chain-en/6ac4a0be598ea8dfb7fce8f8) ### [MikroTrick: Two SSH Bugs Chained into Passwordless Admin on RouterOS](https://blog.fiscybersec.com/mikrotrick-routeros-ssh-chain-en?utm_source=hashnode&utm_medium=feed) Summary MikroTrick is CERT Polska's name for a two-vulnerability chain in RouterOS that gives an attacker full access to the administrative console with no password and no SSH key. Two things make thi 9 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/mikrotrick-routeros-ssh-chain-en?utm_source=hashnode&utm_medium=feed) [K4M1\_n0\_73](https://hashnode.com/@0xKAM1) · [Oct 5](https://hashnode.com/posts/dc-1-drupalgeddon2-suid-binary-to-root-shell/6ac3068a0a6b572e15616e64) ### [DC-1: Drupalgeddon2, SUID binary to root shell](https://0xk4m1.hashnode.dev/dc-1-drupalgeddon2-suid-binary-to-root-shell?utm_source=hashnode&utm_medium=feed) Full DC-1 walkthrough: Drupal exploitation, a misleading password hint, brute forcing SSH, and a SUID find binary for root access. 15 min read · [0xk4m1.hashnode.dev](https://0xk4m1.hashnode.dev/dc-1-drupalgeddon2-suid-binary-to-root-shell?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Sep 28](https://hashnode.com/posts/tryhackme-binary-heaven-writeup/6aba88d702e827109be86b0b) ### [TryHackMe: Binary Heaven - Writeup](https://exploitnotes.hashnode.dev/tryhackme-binary-heaven-writeup?utm_source=hashnode&utm_medium=feed) TryHackMe Binary Heaven walkthrough: Ghidra,GDB, reverse engineering, ret2libc, SUID exploitation, PATH hijacking, and Linux privilege escalation tips 8 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-binary-heaven-writeup?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Sep 22](https://hashnode.com/posts/challenge-brr-tryhackme/6ab2378c81ce0ef2de8a682b) ### [Challenge: Brr (TryHackMe)](https://www.sharonjebitok.com/challenge-brr-tryhackme?utm_source=hashnode&utm_medium=feed) Link to the challenge on TryHackMe: Brr The cold never lies, but the SCADA panel guarding it just handed you the keys. Chase the chill all the way down. Note: The VM takes about 3 minutes to boot up 9 min read · [sharonjebitok.com](https://www.sharonjebitok.com/challenge-brr-tryhackme?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Sep 22](https://hashnode.com/posts/tryhackme-python-playground-writeup/6ab26fe5d90980069bb54b19) ### [TryHackMe: Python Playground Writeup](https://exploitnotes.hashnode.dev/tryhackme-python-playground-writeup?utm_source=hashnode&utm_medium=feed) Python Playground TryHackMe writeup covering Python sandbox bypass, RCE, credential recovery, Docker container escape, and SUID privilege escalation. 8 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-python-playground-writeup?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Sep 22](https://hashnode.com/posts/challenge-operation-coldstart-tryhackme/6ab25012b179f89d677457a0) ### [Challenge: Operation Coldstart (TryHackMe)](https://www.sharonjebitok.com/challenge-operation-coldstart-tryhackme?utm_source=hashnode&utm_medium=feed) Link to the challenge on TryHackMe: Operation Coldstart Volt Labs, a small SaaS shop, suspects an old staging server has rotted into an exposed liability. Mara has assigned you the engagement. Find y 7 min read · [sharonjebitok.com](https://www.sharonjebitok.com/challenge-operation-coldstart-tryhackme?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Sep 10](https://hashnode.com/posts/tryhackme-olympus-writeup/6aa27ae3a238c961e5e2b2b7) ### [TryHackMe - Olympus Writeup](https://exploitnotes.hashnode.dev/tryhackme-olympus-writeup?utm_source=hashnode&utm_medium=feed) Olympus TryHackMe writeup covering Victor CMS SQL injection, credential cracking, file upload RCE, SUID abuse, SSH access, and root shell. 10 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-olympus-writeup?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Sep 9](https://hashnode.com/posts/linux-privilege-escalation-automation/6aa129a323a698f1e47451e3) ### [Linux Privilege Escalation: Automation](https://www.sharonjebitok.com/linux-privilege-escalation-automation?utm_source=hashnode&utm_medium=feed) Link to the challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction Automation earns its keep in privilege escalation the moment you stop treating it as a replacement for manual en 13 min read · [sharonjebitok.com](https://www.sharonjebitok.com/linux-privilege-escalation-automation?utm_source=hashnode&utm_medium=feed)