Скачать или смотреть Linux Capabilities Enumeration

Hi and welcome to this new video!

In this video we continue the "Linux Privilege Escalation" series by focusing on enumeration.

Specifically, I will discuss the role of capabilities in linux systems, how to enumerate the capabilities in a given linux instance and how to abuse certain missconfigurations on capabilities to perform privilege escalation.

If you find the video useful, please support my work by subscribing to the channel, sharing the video with like-minded people, and letting me know what you think of my work down in the comments!

Thank you very much!

-------------------------

TIMESTAMP

00:00 Introduction
01:05 What are capabilities in Linux?
08:34 How to configure capabilities (getcap, setcap)
10:50 How to enumerate capabilities (getcap, getpcaps, capsh)
14:05 Powerful capabilities for exploitations
16:40 Example 1 – CAP_SETUID
20:00 Example 2 – CAP_SYS_PTRACE
25:50 Conclusion

-------------------------

REFERENCES

Material: https://github.com/LeonardoE95/yt-en/...
List of capabilities: https://man7.org/linux/man-pages/man7...
Getcap: https://man7.org/linux/man-pages/man8...
Hacktricks: https://book.hacktricks.xyz/linux-har...
StackOverflow: https://stackoverflow.com/questions/3...

-------------------------

CONTACTS

Blog: https://blog.leonardotamiano.xyz/
Github: https://github.com/LeonardoE95?tab=re...
Support: https://www.paypal.com/donate/?hosted...