weak permissions
To automate Linux Privesc, you can use the LinEnum tool. Get it here
To find files the current user has access to and also to write into it
find / -not -type l -perm -o+w
To generate a salted passwd using openssl
openssl passwd -1 -salt abc password