Linux Sudo Suid Capabilities
Systematically identify and exploit sudo weaknesses, SUID/SGID binaries, and Linux capability misconfigurations to gain root access. The skill covers GTFOBins-based escapes, environment variable injection, CVE exploitation, and polkit vulnerabilities across multiple attack vectors.
Linux Sudo Suid Capabilities helps penetration testers exploit sudo misconfigurations, SUID binaries, and Linux capabilities to escalate privileges.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-04-01
Linux Sudo Suid Capabilities helps penetration testers exploit sudo misconfigurations, SUID binaries, and Linux capabilities to escalate privileges. Systematically identify and exploit sudo weaknesses, SUID/SGID binaries, and Linux capability misconfigurations to gain root access. The skill covers GTFOBins-based escapes, environment variable injection, CVE exploitation, and polkit vulnerabilities across multiple attack vectors.
Use it when
- Linux Sudo Suid Capabilities covers multiple exploitation vectors including environment variable injection, library path manipulation.
- Linux Sudo Suid Capabilities explains how misconfigurations in Linux capabilities enable privilege escalation.
Install
blacklanternsecurity/red-run/linux-sudo-suid-capabilities · repository language: Python
generated, unverified - the skill's exact subdirectory could not be determined; check the repository on GitHub
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I find suid binaries on a Linux system?
Linux Sudo Suid Capabilities teaches methods to locate SUID binaries using commands like `find / -perm -4000` to search for files with the SUID bit set. The skill covers enumeration techniques to identify which binaries may be exploitable for privilege escalation, including checking ownership, permissions, and comparing against known vulnerable patterns in tools like GTFOBins.
What are suid bit exploitation techniques for Linux?
Linux Sudo Suid Capabilities covers multiple exploitation vectors including environment variable injection, library path manipulation, and race conditions in SUID binaries. The skill teaches how to analyze vulnerable SUID programs, craft payloads to execute arbitrary code with elevated privileges, and leverage GTFOBins-based escapes to achieve root access through systematic binary analysis.
How can Linux capabilities be exploited for privilege escalation?
Linux Sudo Suid Capabilities explains how misconfigurations in Linux capabilities enable privilege escalation. The skill covers capability enumeration, identifying dangerous capability assignments (like CAP_SYS_ADMIN or CAP_NET_RAW), and techniques to exploit these capabilities to bypass normal privilege restrictions and gain elevated access without requiring SUID binaries.
What sudo privilege escalation techniques does this skill cover?
Linux Sudo Suid Capabilities addresses sudo misconfigurations including NOPASSWD entries, wildcard abuse, and command injection vulnerabilities. The skill teaches how to identify overly permissive sudo rules, exploit environment variables passed through sudo, and leverage polkit vulnerabilities to escalate privileges when sudo is improperly configured.
How do I assess security risks from suid and capability misconfigurations?
Linux Sudo Suid Capabilities provides security assessment methods to audit SUID binaries, evaluate capability assignments, and test sudo configurations for weaknesses. The skill covers vulnerability identification, risk prioritization, and remediation guidance to help security teams detect and fix privilege escalation vectors before attackers exploit them.
What CVE exploitation and penetration testing methods are included?
Linux Sudo Suid Capabilities teaches penetration testers how to identify and exploit known CVEs affecting sudo, SUID binaries, and capability handling. The skill covers real-world exploitation scenarios, including environment variable attacks, race conditions, and polkit vulnerabilities, enabling comprehensive privilege escalation testing across diverse Linux environments.
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Identify and exploit suid binaries for privilege escalation”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Linux Discovery helps penetration testers systematically identify privilege escalation opportunities on Linux hosts through enumeration of system configuration, sudo settings, group memberships, and kernel vulnerabilities. The skill gathers baseline system information, analyzes user context and permissions, and maps exploitable vectors while respecting scope boundaries and engagement logging.
This skill teaches advanced techniques for moving between Linux hosts after initial compromise. Master SSH agent hijacking, private key discovery, credential extraction from system files and process memory, D-Bus service abuse, and internal network tunneling to expand your foothold across infrastructure.
Master Linux shared library fundamentals: create position-independent libraries with proper soname versioning, embed search paths using RPATH or RUNPATH, and debug loading failures with LD_DEBUG and ldd. Build plugin systems with dlopen/dlsym, intercept functions via LD_PRELOAD, and control symbol visibility to reduce binary bloat and namespace collisions.
This skill covers systematic Linux privilege escalation from low-privilege shell access to root. It walks through enumeration, SUID/SGID binary exploitation, capability abuse, cron job manipulation, NFS misconfigurations, writable system files, LD_PRELOAD tricks, Docker group abuse, and library hijacking—with specific commands and exploitation tables for each vector.
This skill guides penetration testers through Linux privilege escalation via writable critical files, NFS exports, shared library hijacking, and group-based access. It covers assessment of available vectors, exploitation techniques for each path, and integration with engagement logging and state management.
This skill guides you through methodical privilege escalation assessments on Linux systems, covering enumeration of kernel exploits, sudo misconfigurations, SUID binaries, capabilities, cron jobs, PATH hijacking, and NFS weaknesses. It provides workflows for identifying attack vectors and executing exploitation techniques to achieve root-level access from a low-privilege shell.
More skills Windows Credential Harvesting (GPL-3.0) · privilege-escalation-methods (MIT) · Linux Cron Service Abuse (GPL-3.0) · Linux Pentesting Commands (NOASSERTION) · Linux Pentester Practical Commands (NOASSERTION) · Privesc Linpeas (NOASSERTION)