getcap
Lists file capabilities (cap_setuid, cap_dac_read...).
Lists the capabilities assigned to files. Certain capabilities (cap_setuid, cap_dac_read_search, cap_sys_ptrace) on binaries like python or perl allow escalating to root without a full SUID.
Family Privilege escalation
Flags -r / 2>/dev/null
Concepts cap_setuid capability abuse, cap_sys_ptrace capability abuse
Cheatsheet SUID / SGID / capabilities
Installation
sudo apt install -y libcap2-binUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- Hacker Kid 1.0.1VulnHub
- LevramProving Grounds Practice
- NorCDockerLabs