Check Linux Capabilities
privesclinuxchecklist
Summary
Capabilities like cap_setuid on a binary can grant a root shell (check GTFOBins).
Walkthrough
Enumerate file capabilities that may allow privilege escalation.
Commands
bash
/usr/sbin/getcap -r / 2>/dev/null