Joshua Rogers’ Scribbles

Joshua Rogers is an Australian technologist, sysadmin, security engineer, and pentester sharing long-form writeups on hacking, binary web and infra security, programming, technology, politics, and life itself.

Popular posts: 5
Total points: 1,205
HN comments: 652
Rank: #1,687 personal

Visit joshua.hu → RSS feedOn Hacker News Oct 2023 – Mar 2026

Security & Privacy 4 Web & Frontend 2 Tools & Productivity 1 Software Engineering 1 Infrastructure & DevOps 1 AI & Machine Learning 1

Most points Most discussed Most cited Newest

root with a single command: sudo logrotate

2023123 points47 comments Security & Privacy details

Starting from the constraint that only sudo logrotate * may be run, and ending at root: abusing the log file flag to overwrite root owned scripts and ride cron to privilege escalation.