Cybersecurity Triage
Read-only, can be slowFind Writable Directories Missing the Sticky Bit
You need to find directories that any user can write to, but where users can also rename or delete each other's files.
Command
find /srv/www/example -type d -perm -0002 ! -perm -1000 -printf '%m %u:%g %p\n' 2>/dev/null | sortBefore you run this
System impact: Read-only. Can create load on large logs, directories, filesystems, or process tables.
When not to use it: Do not assume every result is exploitable without checking service users and directory purpose.
Expected output
Mode, owner, group, and path for writable directories missing the sticky bit.
System impact
Read-only, can be slow. Nothing changes. The command lists world-writable directories that lack sticky-bit protection.
Scope this to the smallest useful path or service on busy systems.
Recovery / rollback: no state is changed.
When to use it
Use during permission audits when shared write paths may have been opened too broadly.
When not to use it
Do not assume every result is exploitable without checking service users and directory purpose.
next steps
Related commands
Find Upload Files Writable Outside the Owner
Uploads are supposed to be writable at the edge, not writable forever by everyone.
find /srv/www/example/shared/uploads -type f -perm /0022 -printf '%M %u:%g %p\n' 2>/dev/null | sort
Find Config Files with Execute Bits
Config files do not usually need to be executable.
find /srv/www/example -type f -perm /111 \( -path '*/config/*' -o -name '*.env' -o -name '*.conf' \) -printf '%M %u:%g %p\n' 2>/dev/null | sort
Find SUID, SGID, and Sticky Bits in an App Tree
Special bits are easy to miss in a long ls listing.
find /srv/www/example -perm /7000 -printf '%M %m %u:%g %p\n' 2>/dev/null | sort
Find World-Readable Secret-Looking Files
The fastest secret audit starts with readable files that look like secrets.
find /srv/www/example -type f -perm -0004 \( -iname '*secret*' -o -iname '*.env' -o -iname '*token*' -o -iname '*key*' \) -printf '%M %u:%g %p\n' 2>/dev/null | sort
Find Runtime Directories Writable Outside the Owner
Runtime directories often need writes, but the write boundary should be visible.
find /srv/www/example/shared/storage /srv/www/example/shared/uploads -type d -perm /0022 -printf '%M %u:%g %p\n' 2>/dev/null | sort
Study mapping
Use this as independent command practice: read the notes, predict the output, then compare it with the example before using a real shell.
Independent study support only. No affiliation, endorsement, exam dumps, or real exam questions.