Linux privesc via sudo / SUID / capabilities (GTFOBins)

When it applies

You have a low-priv Linux shell. The fastest root is almost always a misconfig — a sudo rule, a SUID binary, or a file capability that a known GTFOBins technique turns into a root shell or file read/write. Do this before kernel exploits.

Why it works

Many normal binaries can spawn shells, read/write files, or run commands. When such a binary runs with elevated rights — via sudo, the SUID bit, or a capability like cap_setuid — that power becomes yours. GTFOBins catalogs the exact escape for each binary.