Back to lessonhackingpath / lab
Capture the FlagMedium

Cap It Off

Lab for Linux Capabilities for Privilege Escalation

Scenario

Capabilities are SUID's fine-grained cousin, and one on the wrong binary is still root. Enumerate every file with capabilities, spot the dangerous one, and use the access it grants to read the root-only flag.

Objective

Enumerate file capabilities, find the dangerous one, and read the root flag it grants.

lab ~ cap it offnothing real runs
booting lab sandbox…

This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.