MZEEAV_SUID

Unknown SUID Binary

---

An unknown SUID binary has been discovered; /opt/fileS

It’s not even readable. Only executable

www-data@mzeeav:/var/www$ /opt/fileS
.
./html
./html/upload
./html/upload/shell.php
./html/upload/wget.exe
./html/upload/whoami.exe
./html/upload/index.html
./html/listing.php
./html/upload.php
./html/backups
./html/backups/backup.zip
./html/index.html

Executing the SUID binary appears to use the find command to recursively list files in current directory

www-data@mzeeav:/var/www$ find
.
./html
./html/upload
./html/upload/shell.php
./html/upload/wget.exe
./html/upload/whoami.exe
./html/upload/index.html
./html/listing.php
./html/upload.php
./html/backups
./html/backups/backup.zip
./html/index.html

Like so

According to GTFObins, find with SUID bit set can be abused for privilege escalation