WOCSA

WEHW Mensuel

Date: June 11, 2026

Description: **Workshop: Linux Privilege Escalation — Learn to become "root" like a pro!** *** ### **Why this workshop?** Have you heard of hackers taking total control of a server? This workshop offers you the chance to **discover 12 classic techniques** to go from a normal user to **administrator (root)** on a Linux system. Each exercise is designed as a **mini-challenge (CTF)**: your goal is to find and exploit a vulnerability to read a secret file (`/root/flag.txt`). *** ### **What you will do:** * **Discover common vulnerabilities**: * Exploit misconfigured programs (**SUID**, **sudo without password**). * Hijack automated tasks (**cron jobs**). * Take advantage of files modifiable by everyone (**/etc/passwd**, root scripts). * Find forgotten or reused passwords. * **Learn an investigation method**: You will receive a **checklist** to explore an unknown system: * Who am I? What rights do I have? * What programs can I run as admin (`sudo -l`)? * What files are modifiable or have special rights? * Are there plaintext passwords in the files? * **Practice safely**: Each lab is isolated in a **Docker container**. You can break everything without risk! *** ### **Why it's useful:** * **For developers/sysadmins**: Understand how to secure a server and avoid these pitfalls. * **For cybersecurity enthusiasts**: Train for competitions (CTF) or penetration tests. * **For the curious**: Discover how "real" attacks work (but in a legal and supervised manner). *** ### **Example challenge:** > *"You are logged in as user `wocsa`. The file `/root/flag.txt` is inaccessible... but the program `/usr/bin/find` has a special right (SUID). How can you take advantage of it to become root?"* *** **Prerequisites:** A PC with Docker installed. No advanced knowledge required — just the desire to learn! The WEHW Toulouse group brings together people interested in "Ethical Hacking" and cybersecurity in general. It houses a discussion space (in the form of a mailing list) and offers a monthly meeting. Its primary purpose is to allow professionals, students, and all enthusiasts in general to exchange and enrich each other with their experiences and skills. The approach is respectful and membership is subject to validation and signing of a deontological charter. For all information, join us on Discord! You can also find our workshops on GitHub: Do you have suggestions? It's here:

Location: Artilect FabLab Toulouse, 10 Rue Tripière, Toulouse, FR

Projects: ethical-hacking-workshops

Cyberjutsu Project Bootcamp

Date: June 26, 2026

Description: Cyberjutsu Summer Bootcamp V1.3 No prior martial arts or cybersecurity skills are required—if you can read, write, count, and move, this bootcamp is made for you

Location: 1 Chem. du Ferradou, 31700 Blagnac, FR

Projects: cyberjutsu

WEHW Mensuel

Date: July 9, 2026

Description: The WEHW Toulouse group brings together people interested in "Ethical Hacking" and cybersecurity in general. It houses a discussion space (in the form of a mailing list) and offers a monthly meeting. Its primary purpose is to allow professionals, students, and all enthusiasts in general to exchange and enrich each other with their experiences and skills. The approach is respectful and membership is subject to validation and signing of a deontological charter. For all information, join us on Discord! You can also find our workshops on GitHub: Do you have suggestions? It's here:

Location: Artilect FabLab Toulouse, 10 Rue Tripière, Toulouse, FR

Projects: ethical-hacking-workshops