An Interesting Privilege Escalation vector (getcap/setcap)

Introduction I recently came across an interesting way of escalating privileges on a GNU/Linux system during a CTF challenge. It involves file/process capabilities. In Linux, files may be given specific capabilities. For example, if an executable needs to access (read) files that are only readable by root, it is possible to give that file this … Continue reading An Interesting Privilege Escalation vector (getcap/setcap)