https://leikah.haoyingcao.xyz/en/tags/setuid/Recent content in Setuid on LEIKAHHugoenhttps://leikah.haoyingcao.xyz/en/docs/priv_esc/linux/permission/suid/Mon, 01 Jan 0001 00:00:00 +0000https://leikah.haoyingcao.xyz/en/docs/priv_esc/linux/permission/suid/<p>The <strong>Set User IP upon Execution (setuid)</strong> permission can allow a user to execute a program or script with the permission of another user, typically with elevated privileges.</p> <p>We may use the following command to find <code>setuid</code> files owned by root. Note that setuid executables will be marked with <code>s</code>.</p> <div class="highlight"><pre tabindex="0" style="color:#d8dee9;background-color:#2e3440;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>find / -user root -perm -4000 -exec ls -ldb <span style="color:#81a1c1">{}</span> <span style="color:#ebcb8b">\;</span> 2&gt;/dev/null </span></span></code></pre></div><p>If one of the executables listed above allows command to be executed, it can be leveraged for privilege escalation and execute commands as root.</p>