suid/sgid

filtered grep

find / -path /snap -prune -o -type f -user root -perm -u=s -print 2>/dev/null | grep -vE '/bin/mount$|/bin/umount$|/bin/ping$|/usr/bin/chfn$|/usr/bin/chsh$|/usr/bin/gpasswd$|/usr/bin/newgrp$|/usr/bin/passwd$|/usr/bin/su$|/usr/bin/sudo$|/usr/bin/pkexec$|/usr/bin/arping$|/bin/fusermount$|/bin/su$|/usr/lib/openssh/ssh-keysing$|/usr/lib/snapd/snap-confine$|/usr/sbin/pppd$|/usr/bin/traceroute6.iputils$|/usr/lib/dbus-1.0/dbus-daemon-launch-helper$|/usr/lib/policykit-1/polkit-agent-helper-1$|/usr/lib/eject/dmcrypt-get-device$|/usr/lib/xorg/Xorg.wrap$|/usr/bin/vmware-user-suid-wrapper$|/usr/lib/openssh/ssh-keysign$' | awk '{print "\033[32m" $0 "\033[0m"}'

https://gtfobins.github.io/

SUID Binaries?
find / -perm -u=s -type f 2>/dev/null

GUID Binaries?
find / -perm -g=s -type f 2>/dev/null