Enumeration Scripts

1. LinPEAS - Linux Privilege Escalation Awesome Script

wget "https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh" -O linpeas.sh

curl "https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh" -o linpeas.sh

./linpeas.sh -a #all checks - deeper system enumeration, but it takes longer to complete.

./linpeas.sh -s #superfast & stealth - This will bypass some time consuming checks. In stealth mode Nothing will be written to the disk.

./linpeas.sh -P #Password - Pass a password that will be used with sudo -l and bruteforcing other users

1. LinuxSmartEnumeration - Linux enumeration tools for pentesting and CTFs

wget "https://raw.githubusercontent.com/diego-treitos/linux-smart-enumeration/master/lse.sh" -O lse.sh

curl "https://raw.githubusercontent.com/diego-treitos/linux-smart-enumeration/master/lse.sh" -o lse.sh

./lse.sh -l1 # shows interesting information that should help you to privesc

./lse.sh -l2 # dump all the information it gathers about the system

1. LinEnum - Scripted Local Linux Enumeration & Privilege Escalation Checks

./LinEnum.sh -s -k keyword -r report -e /tmp/ -t

1. linuxprivchecker.py - a Linux Privilege Escalation Check Script

2. unix-privesc-check - Automatically exported from code.google.com/p/unix-privesc-check

3. BeRoot - Privilege Escalation Project - Windows / Linux / Mac

4. Privilege Escalation through sudo - Linux

• Vulnerability scan

  • perl les2.pl --> https://github.com/jondonas/linux-exploit-suggester-2

  • bash les.sh --> https://github.com/mzet-/linux-exploit-suggester

• Suid checker

  • python suid3num.py

  • https://gtfobins.github.io/