Setuid Capabilities

Table of contents

1. Prerequisites
2. Exploit

---

Prerequisites

• Low privileged access to the Linux target.

Exploit

First, search for binaries that have setuid capabilities enabled with +ep flag (effective and permitted).

getcap -r / 2>/dev/null | grep setuid

Once you find a suitable binary, you can either try to exploit it by your way, or check on GTFOBins.