Privesc Quick Checks

First things to look at when hunting for a privilege-escalation path.

sudo -l                             # commands the current user may run as root
find / -perm -4000 2>/dev/null      # SUID binaries

Check whether any sudo-runnable binary is a known shell-escape (GTFOBins-style):

sudo -l 2>/dev/null | grep -wE 'nmap|perl|awk|find|bash|sh|man|more|less|vi|vim|nc|netcat|python|ruby|lua|irb'