linux-capabilities

Authentication gateway / Dynamic SSH key manager / Privileged access management tool for Linux.

A statically linked lightweight version of setcap(8) to use in `scratch` images

run executables with capabilities, while using shared libraries from locations in $LD_LIBRARY_PATH, as non-root user

Linux capability bindings for Ruby.

Statistical analysis of getrusage() data for two processes

CentOS based Docker Security Architecture

Evidence-backed minimum-security profiles for container images: the capabilities and read-only-filesystem config each image actually needs, with drop-test proof

capv is a viewer of Linux capabilitiies.

docker-debug-learning

Rootless Linux container runtime in Go. Namespaces, cgroups v2, overlayfs, Docker-grade seccomp/capabilities, plus automatic least-privilege hardening: profile an app with ptrace, then enforce only the syscalls, capabilities and writable paths it used. Evaluated with 17 attacks and benchmarks.

A simple Linux process supervisor written in Go.

Study on linux capabilities

HTB Lightweight (10.10.10.119)

Inspektor Gadget advisor gadgets: derive minimal capabilities, read-only rootfs + writable paths, and device grants from live eBPF observation

Run inside any container to immediately understand its attack surface and escape potential.

Disable sandbox

IDOR → cleartext credential exposure → password reuse → Linux capability abuse to root, on HackTheBox's Cap machine.

A program to escalate to root privileges with many different capabilities