Special permission

SUID

find / -user root -perm -4000 -exec ls -ldb {} \; 2>/dev/null

GUID

find / -user root -perm -6000 -exec ls -ldb {} \; 2>/dev/null

Automate with GTFO-bin

for i in $(curl -s https://gtfobins.github.io/ | html2text | cut -d" " -f1 | sed '/^[[:space:]]*$/d');do if grep -q "$i" installed_pkgs.list;then echo "Check GTFO for: $i";fi;done