Gobuster

Additionally you can use more flags in gobuster :

• q : quiet , silent scan . Will hide banner .
• o : Output to be stored in the directory
• x : Search for extensions e.g. html,txt,php,phtml etc.

nmap -sC -sV -oN nmap/rootme <MACHINE_IP>

https://medium.com/@wiktorderda/rootme-tryhackme-ctf-walkthrough-656232b4c901

https://gtfobins.github.io/

find / -user root -perm /4000 1