Linux Privesc Abusing Linux Capabilities for Privilege Escalation How attackers abuse cap_setuid and cap_dac_read_search file capabilities to escalate to root, and how blue teams detect it. 2026.03.19 Linux Privesc