How to Find Executables with SUID Capabilities

author: Nathan Acks
date: 2022-04-21

Executables can also have an SUID “capability” set in Linux, which is not the same as the SUID permission!

The getcap command displays a binary’s capabilities (if there are any), and can even be used to perform a search for such binaries using getcap -r $PATH 2> /dev/null.