VerdantBamboo BRICKSTORM: Sudo Abuse LPE on Linux/BSD Edge Appliances

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•5

Detects instances where a non-root user executes the 'sudo' command in combination with 'tee'. This pattern is frequently used to bypass file permission restrictions by appending or writing content to sensitive system files that would normally require root privileges, a common method for privilege escalation or maintaining persistence.