How to check for bad priv setting

General system Applications
1

find . -perm /4000 2>/dev/null

this finds system files and bins which can used non root to gain root

here is a list of bin and how users can use them to gain root and attack a machine using bad configs on perms https://gtfobins.org/

2

a good example is if sudo is chmod 777 you can run sudo sudo without password