You might want to check this URL:
Experience also matters. A cronjob running, faulty SUID configuration, kernel information, misconfigured applications, are the basic ones which can give you some hints, and can easily give you privileged access to root.
This is what I see usually, else any elf, py, scripts, binaries are also misconfigured, which can be used as well.