Anonymous FTP to root through a daisy-chain of Linux privesc classics, finishing on sudo less.