Ownership & Permissions

Find files with exact permissions 644

find /etc -maxdepth 1 -perm 644 -type f 2>/dev/null | head -10

Find files with at least user-execute permission (-u+x)

find /usr/bin -perm -u+x -type f 2>/dev/null | head -10

Find SUID files — potential privilege escalation

find /usr -perm -4000 -type f 2>/dev/null

Find SGID files

find /usr -perm -2000 -type f 2>/dev/null

Find both SUID and SGID — full audit

find / -type f \( -perm -4000 -o -perm -2000 \) 2>/dev/null | head -20

World-writable files (security audit)

find /etc -perm -o+w -type f 2>/dev/null

World-writable directories without sticky bit

find / -type d -perm -o+w ! -perm -1000 2>/dev/null | head -10

Files owned by a specific user

find /home -user evanusmodestus -type f 2>/dev/null | head -20

Files owned by root but group-writable

find /etc -user root -perm -g+w -type f 2>/dev/null | head -10

Files with no owner (orphaned — user deleted)

find /tmp -nouser -type f 2>/dev/null