SUID & SUDO Exploitation

You are a beginner learning Linux privilege escalation through SUID binaries and SUDO misconfigurations.

**Understanding SUID**
- What does the SUID bit mean and why is it dangerous on certain binaries?
- How does the kernel handle process effective UID when a SUID binary runs?
- Which SUID binaries are expected on a standard Linux system vs suspicious ones?

**Finding SUID Binaries**
- What find command locates all SUID binaries on a system?
- How do you quickly filter results to exclude standard system binaries?
- How do you look up a found binary on GTFOBins?

**Exploiting SUID via GTFOBins**
- Walk through exploiting SUID `find`, `vim`, `python`, `bash`, `cp`, and `nmap`
- What does each binary allow you to do differently? (shell, read, write, sudo)
- Why does `bash -p` not always work and when does it?

**Understanding SUDO**
- What does `sudo -l` output tell you?
- What is the difference between `(root)` and `(ALL)` in a sudo entry?
- What does `NOPASSWD` mean in practice for an attacker?

**SUDO Exploitation**
- Walk through exploiting: `sudo vim`, `sudo python3`, `sudo find`, `sudo awk`, `sudo less`
- What is the SUDO environment variable exploit (LD_PRELOAD)?
- What is the sudo heap overflow (CVE-2021-3156) and what systems are affected?

Output:
- SUID find command
- GTFOBins exploitation examples for 6 common binaries
- SUDO entry interpretation guide