Linux Sudo Suid Capabilities
Systematically identify and exploit sudo weaknesses, SUID/SGID binaries, and Linux capability misconfigurations to gain root access. The skill covers GTFOBins-based escapes, environment variable injection, CVE exploitation, and polkit vulnerabilities across multiple attack vectors.
Linux Sudo Suid Capabilities helps penetration testers exploit sudo misconfigurations, SUID binaries, and Linux capabilities to escalate privileges.
AI-generated summary based on this skill's SKILL.md
Install
blacklanternsecurity/red-run/linux-sudo-suid-capabilities · repository language: Python
git clone https://github.com/blacklanternsecurity/red-run
cp -r red-run ~/.claude/skills/linux-sudo-suid-capabilitiesgenerated, unverified - the skill's exact subdirectory could not be determined; check the repository on GitHub
npx skillfed install blacklanternsecurity/red-run/linux-sudo-suid-capabilitiesFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I find suid binaries on a Linux system?
Linux Sudo Suid Capabilities teaches methods to locate SUID binaries using commands like `find / -perm -4000` to search for files with the SUID bit set. The skill covers enumeration techniques to identify which binaries may be exploitable for privilege escalation, including checking ownership, permissions, and comparing against known vulnerable patterns in tools like GTFOBins.
What are suid bit exploitation techniques for Linux?
Linux Sudo Suid Capabilities covers multiple exploitation vectors including environment variable injection, library path manipulation, and race conditions in SUID binaries. The skill teaches how to analyze vulnerable SUID programs, craft payloads to execute arbitrary code with elevated privileges, and leverage GTFOBins-based escapes to achieve root access through systematic binary analysis.
How can Linux capabilities be exploited for privilege escalation?
Linux Sudo Suid Capabilities explains how misconfigurations in Linux capabilities enable privilege escalation. The skill covers capability enumeration, identifying dangerous capability assignments (like CAP_SYS_ADMIN or CAP_NET_RAW), and techniques to exploit these capabilities to bypass normal privilege restrictions and gain elevated access without requiring SUID binaries.
What sudo privilege escalation techniques does this skill cover?
Linux Sudo Suid Capabilities addresses sudo misconfigurations including NOPASSWD entries, wildcard abuse, and command injection vulnerabilities. The skill teaches how to identify overly permissive sudo rules, exploit environment variables passed through sudo, and leverage polkit vulnerabilities to escalate privileges when sudo is improperly configured.
How do I assess security risks from suid and capability misconfigurations?
Linux Sudo Suid Capabilities provides security assessment methods to audit SUID binaries, evaluate capability assignments, and test sudo configurations for weaknesses. The skill covers vulnerability identification, risk prioritization, and remediation guidance to help security teams detect and fix privilege escalation vectors before attackers exploit them.
What CVE exploitation and penetration testing methods are included?
Linux Sudo Suid Capabilities teaches penetration testers how to identify and exploit known CVEs affecting sudo, SUID binaries, and capability handling. The skill covers real-world exploitation scenarios, including environment variable attacks, race conditions, and polkit vulnerabilities, enabling comprehensive privilege escalation testing across diverse Linux environments.