All right, guys, now in this video, we'll be talking about the special operations in Iraq.
First, I will start with an example in order to have the better understanding.
So was I am working in a company and I have a binary to the binary that I was.
So in order to execute that binary, it asks the sort of permissions that means I need to run additional
permissions.
So what I do is I go to administrator or administrator in the company and he will come to my desktop
computer and he will have the password and he will run the electrical work.
OK, that's fine.
So what if I want to use that binary so many times?
Like 10 times, 15 times.
So every time he wants to come to my desktop and computer for security purposes.
So in order to prevent that.
Time wasted, what a shelter does is he said some special bits on that binary so that anyone running
that Bernadi will can run and as that user.
So you've got to set some permissions on that binary.
And if I'm running that binary, that binary will automatically run as a route user.
So I will explain it.
So I type a Lespinasse cell to display all the files in order to know I'm going to say that.
Fight that system, so I'm going I have created the template, right, so that information is are right
for my user and the Read-Only for others.
I know what I want to do is to change this part of the time, to set this special card user.
And this will set the executable for the user as s so that we have the S.H. Marchman.
Or do you want to lose?
You need to type secret model and you need to say you press.
That means we are keeping the user with you process.
So we are making that user as it should be.
We are setting the user ready.
So for user permissions, you need to set down idea and I want to come.
So if I share my concern, as you can see, there is a capitalis.
So this captor's indicates that our binary is not a adequate but the user I.D., which has been said.
So to make it executable, we need to see it more.
But at six am, so now we have given that executable permissions for less money.
You can see there is less.
Now I can execute this as it executable, this 10 percent executable.
And remember, if there is CAPITALIS in the security, we cannot execute this file.
We should make sure that we have given us sufficient permissions to run this machinery so we have the
smallest.
That means we can run this as the owner of that.
Honor of that fight, which is so if any other user like Senecal, Nicoleta, has been using this binary,
then they would run this temporary as a Nickey user.
So if any binary has been set, you ready to go to one recruit user, then that binary will execute
as a root user by any other user.
So this leads to some privilege problems.
So we'll discuss that later.
Now, another bit I want to say, is this one a good tool for the group Brookpark that you set said
Gruppioni, If I put that bet on, it means that this binary can be added to that as the permissions
of that group.
So somebody, Nikil, to Article three has been using this file.
Then they execute this file as a group are part of this group.
So let me show that to.
So I will say that.
Them, too, and I see her more, and this time, what do you want to lose?
You want to depress us because we are setting the group right.
And I want to say them to.
Fisheries minister, now there is a captor's in the group, permission of the executive.
Now, what I want to do is I want to set executable, so I want this see it more, Prosek's says the
executive bit for our user group and others.
Facilities minister, notorious figures for the group promotions.
There is a split second, so if if any anonymous are there on this binary, then they will be running
as the owner or member of this Nickey group.
And there is one more call to keep it and to do this, we need to see its multiplicity and to pressure
this mindset.
So there you see this for every other user.
It is the last bit has been said to be.
So these exhibits are very advantageous and helpful when you are sharing a folder in the network of
your computers.
So if you are sharing a folder in a net profit sharing, then this should be on.
It's like better.
So what it does is it will prevent any other user to delete the contents of the folder except the owner
and the user.
So I have created this folder.
And if I said just to keep it on and I a to do necrophile shading, then this prevents every other user
except Ruth and me.
I am the owner because and the root user only can do those contents.
And therefore so every other user technical to temporarily give the user cannot delete the contents
of the directory.
So it is safe or secure way to host your directress in your network.
So generally, you see this ticket in network publishers generally just don't on shifts because we don't
have a large number of computers.
Right.
So I'm just saying that if you want to expose your territory to a more than 10 computers and you just
put this together, we don't know.
The interesting part is these security boundaries.
So the binaries which had the.
This is about security on our consulate windows, you can see escalating boundaries, so these penalties
are very prone to prevent escalation because in sufficient or wrong method of setting, these are the
programs can reach to prevent escalation.
So one way to find these bits, I mean, these are, you know, to find slash from the router three,
I want to find and I want to say.
So I want to denote some binaries that have the permissions user, which is a cul de sac.
So I want to find from the tree and with the permissions as user is equal to.
So in our case, our user has been set and I want to say only type of the file.
I don't want any directress.
And what I want to do is I want to say a could download.
So we have seen this redirection of of error to the owner.
Now, if I hit enter.
Now you can see, but let me stop this one, you can see there are a lot of mental order with this user
bit on are binaries.
And if you don't, you can also see how many kids.
So these are binary, which has the sweet pizzica so that with this command you can find the sweet binaries
and we can do some privileges, which you'll be seeing in the escalation section.
So I think that's all you need to know about this special permissions.