Day 20: SUID Deep-Dive — From Zip to Tar Exploitation 🕵️‍♂️

This article explains the SUID privilege escalation mechanism by detailing the difference between RUID and EUID, and demonstrates how seemingly harmless binaries like zip and tar can be exploited to spawn root shells. It also outlines a researcher's workflow for auditing unfamiliar SUID binaries using strings, man pages, and interactive mode checks.