GTFOBins SUID (ejemplo find)

find . -exec /bin/sh -p \; -quit

Exploits an abusable SUID binary (find is the classic example) to spawn a shell with effective root privileges. The -p flag in sh prevents the shell from dropping its euid to the real uid.

When SUID enumeration shows you a binary tagged 'suid' in GTFOBins and your user can execute it. The find example works as-is: find inherits euid 0 and -exec runs /bin/sh -p with those privileges.

If the SUID binary belongs to a non-root user or has flags that limit -exec. Also not if the system has AppArmor or SELinux restricting shell execution from that context: the shell may open but without effective privileges.