GO KALI FREE

LinPEAS

Post Exploitation

Intermediatelow risk

LinPEAS is a script that searches for possible paths to escalate privileges on Linux hosts. It highlights findings using colors to signal potential misconfigurations or vulnerabilities.

Installation

curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh -o linpeas.sh

Basic Syntax

sh linpeas.sh [options]

Quick Facts

Full Name
LinPEAS - Linux PEASS
License
MIT
Language
Bash
Interface
CLI
Category
Privilege Escalation
Requires
Shell Access on Target

Tool Overview

LinPEAS is the premier privilege escalation enumeration script for Linux systems. It performs hundreds of checks to identify misconfigurations and vulnerabilities that can be exploited to elevate from a low-privileged user to root.

With color-coded output, zero dependencies, and regular updates reflecting the latest privilege escalation techniques, LinPEAS is an essential tool for any Linux post-exploitation assessment.

Common Commands

./linpeas.shRun the default set of local privilege-escalation checks
curl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | shDownload the latest release and run it entirely in memory
wget https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh -O linpeas.shDownload the latest linpeas.sh release to disk
chmod +x linpeas.sh && ./linpeas.shMake the script executable and run it
sh linpeas.sh -hShow the help text and available options
./linpeas.sh -aRun all checks including su brute-force and process monitoring (noisy)
./linpeas.sh -sStealth/superfast mode: skip slow checks and avoid writing files
./linpeas.sh -ePerform extra, more thorough enumeration
./linpeas.sh -P '<PASS>'Supply a password for sudo -l and to brute-force other users
./linpeas.sh -o SysI,Net,UsrIOnly run the selected comma-separated check groups
./linpeas.sh -qSuppress the banner
./linpeas.sh -NDisable colored (ANSI) output
./linpeas.sh -rSkip the privesc detection regexes to run faster
./linpeas.sh -LForce-run the linux-exploit-suggester checks
./linpeas.sh -DEnable debug mode for troubleshooting

Step-by-Step Guide

  1. 1Move the script file onto the destination machine
  2. 2Modify file permissions to allow execution
  3. 3Execute the audit script
  4. 4Scan the output prioritizing the color-coded warnings
  5. 5Investigate any items marked in red or yellow
  6. 6Determine if the highlighted misconfigurations can be exploited

Use Cases

Privilege Escalation

Find paths to escalate to root.

System Audit

Audit Linux security posture.

Container Escape

Detect container escape vectors.

Credential Hunting

Find passwords in configs and files.

Key Features

Related Tools

WinPEAS

Post Exploitation

Windows equivalent script.

GTFOBins

Post Exploitation

SUID binary exploit reference.

Frequently Asked Questions

What is LinPEAS used for?

LinPEAS (Linux Privilege Escalation Awesome Script) scans Linux systems for misconfigurations and vulnerabilities that could lead to privilege escalation, including SUID binaries, cron jobs, sudo rules, and kernel exploits.

How does LinPEAS color-code results?

LinPEAS uses a color system: Red/Cyan for high-privilege findings, Yellow for potential issues, and Purple for interesting information that requires manual investigation.

Do I need to install anything for LinPEAS?

No, LinPEAS is a standalone shell script. Just download it and execute with sh. It works on most Linux distributions without dependencies.

What types of checks does LinPEAS perform?

LinPEAS checks SUID/SGID binaries, sudo misconfigurations, cron jobs, world-writable files, kernel vulnerabilities, network information, processes running as root, password policies, and credentials in configuration files.

Tags

#post-exploitation#privilege-escalation#linux#enumeration

Ethical Usage Notice

This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.