> Gaining root to any network you don't own or have authorization to operate is clearly crossing the line

Q: As an attacker - whatever colour your hat - how are you supposed to know if any particular action may gain you root unless/until you try it?