Here’s a whole list of misconfigurations for specific binaries and the privileges they can accidentally provide. Useful for replacing the whale in your nightmares: https://gtfobins.org/

Because one of the biggest companies on the planet that has issues with account takeovers clearly has no internal red team working on this stuff.

It’s amazing the level of contempt for the average user most tech companies have these days.