Add "setuid
and setgid
" technique (T1166)
#702
Labels
Feature
Issue that describes a new feature to be implemented.
setuid
and setgid
" technique (T1166)
#702
T1166
setuid
orsetgid
bits are set on Linux so that the application will run with the privileges of the owning user or group respectively, instead of the user or the group of the user launching it.Adversaries can use this to either do a shell escape or exploit a vulnerability in an application with the
setuid
orsetgid
bits to get code running in a different user’s context.Adding it as PBA:
- LINUX: try modifying file permissions using
chown
andchmod
; see this and this- WINDOWS: not applicable
Mapping the technique to the ATT&CK matrix
The text was updated successfully, but these errors were encountered: