Linux Privesc Abusing a World-Writable /etc/passwd for Root
How a writable /etc/passwd or /etc/shadow leads to instant root, with PoC and Blue Team defenses.
Security Engineer's blog on Active Directory, Malware Analysis, and Offensive Security.
