Linux Privesc Triage One-Liner
First 30 seconds on a Linux foothold: SUID binaries, sudo rights, writable cron, and kernel version — before reaching for linpeas.
# quick manual sweep before dropping tooling
id; sudo -n -l 2>/dev/null # current creds + passwordless sudo
find / -perm -4000 -type f 2>/dev/null # SUID binaries (check gtfobins)
getcap -r / 2>/dev/null # file capabilities
grep -R . /etc/cron* 2>/dev/null # cron jobs (writable script = win)
uname -a; cat /etc/os-release # kernel + distro for exploit-db