Get the Whitepaper called Flag execution for easy local privilege escalation.
You can download it from the following link: https://packetstormsecurity.com/files/download/88938/flag-execution.pdf
Source: https://packetstormsecurity.com/files/88938/Whitepaper-Called-Flag-Execution-For-Easy-Local-Privilege-Escalation.html