Question on SFTP Without Execution

[Himself132]

What would the attack profile with chw00t be on a system like this?

override default of no subsystems

Subsystem sftp /usr/lib/openssh/sftp-server

Match User companyname
ForceCommand internal-sftp
ChrootDirectory /opt/sftp/companyname
PermitTunnel no

Where /root is not world writeable? drwx------ 4 root root 4096 Jul 15 21:58 root

I can upload the file and create directories and use chown but ./chw00t is not a command it can run.

[earthquake]

First of all, chw00t is just a compilation of different technique to break out of certain chrooted environment. In case you cannot execute the binary, you cannot use it of course.
It seems to me that you cannot change the configuration neither, none of the known techniques will help you break out unfortunately.
In case you could change the config or you have a different user that is chrooted into a directory under this path: /opt/sftp/companyname, you could use the two users combined to break out with the Move-out-of-chroot technique (-5).