Blacksite DB

Once you have a foothold, don't just look for files to read — look at what permissions you've already been granted. Some accounts are quietly allowed to run specific programs with elevated rights, no extra authentication required. If one of those programs can execute arbitrary code or spawn a shell on your behalf, you've found your way up.

Check your sudo permissions to see what administrative programs you can run.