While enumerating a new hackthebox machine, I was stuck at the www-data user and no clear path to go. I knew I could dump the database, look at redis, and likely would find credentials to elevate — but I wanted to do some unique trickery!
The sudo -l command showed me
