linpeas

Automate Linux privilege escalation discovery by running a script that scans for SUID binaries, writable paths, weak service configurations, cron jobs, sudo rules, and kernel CVE indicators. It identifies potential attack paths from a low-privilege user context.

The best way to enumerate post-exploitation vectors on macOS is using an automated script that checks for SUID binaries, writable paths, weak service configurations, and sudo rules. This automates the discovery of privilege escalation attack paths.

No, you do not need root access to run this privilege escalation enumeration script. It is designed for low-privilege execution by non-root users, making it safe for post-exploitation scenarios on Linux and macOS systems.

Yes, you can use this to check for kernel CVE indicators during a security assessment. The enumeration process identifies kernel CVE indicators alongside SUID binaries, weak service configurations, and sudo rules to map potential privilege escalation paths.

A bash-compatible shell environment on the target Linux or macOS system is required to scan for SUID binaries and weak service configurations. This allows the enumeration script to execute and identify privilege escalation vectors.

Post-exploitation enumeration focuses on cron jobs and sudo rules because misconfigurations in these areas often provide attack paths to root. Automating the discovery of these weak service configurations helps security professionals escalate privileges efficiently.