Capabilities

Linux Privesc

Abusing Linux Capabilities for Privilege Escalation

How attackers abuse cap_setuid and cap_dac_read_search file capabilities to escalate to root, and how blue teams detect it.