ctfnote
search
⌘Ctrlk
ctfnote
  • /home/ret2basic.eth
  • Web3 Security Research
    • πŸ‘‘Web3 Security Research Trivia
    • DeFi
    • πŸ‘‘Secureum
    • βœ…Solidity
    • βœ…Foundry
    • EVM
    • Vulnerabilities
  • Game Hacking
    • βœ…C++
    • Ghidra
    • Cheat Engine
    • Proxy
    • DLL injection
    • Keygen
    • Aimbot
  • Red Teaming
    • βœ…Enumeration
    • βœ…Exploitation
    • βœ…Buffer Overflow
    • βœ…Privilege Escalation
      • Linux Privilege Escalation
        • Linux Permissions
        • Manual Enumeration
        • Automated Tools
        • Kernel Exploits
        • Passwords and File Permissions
        • SSH Keys
        • Sudo
        • SUID
        • Capabilities
        • Cron Jobs
        • NFS Root Squashing
        • Docker
        • GNU C Library
        • Exim
        • Linux Privilege Escalation Course Capstone
      • Windows Privilege Escalation
    • βœ…Post Exploitation
    • βœ…Pivoting
    • Active Directory (AD)
    • Command & Control (C2)
    • Malware Development
  • Cryptography
    • Hash Functions
    • MAC
    • AES
    • Diffie-Hellman
    • RSA
    • ECC
    • Digital Signature
    • JWT
    • PRNG
    • SSL/TLS
    • Research
  • Computer Science
    • Linux
    • Python
    • HTML, CSS, JavaScript, and React
    • Data Structures and Algorithms
    • The Linux Programming Interface
    • Computer Systems
    • Databases
    • Distributed Systems
    • Static Analysis
  • Web
    • βœ…Prerequisites
    • File Upload
    • SQL Injection (SQLi)
    • Cross-Site Scripting (XSS)
    • CSRF and SSRF
    • XML External Entities (XXE)
    • Insecure Deserialization
    • HTTP Request Smuggling
    • OS Command Injection
    • βœ…Directory Traversal
    • HTTP Parameter Pollution
    • Server-Side Template Injection (SSTI)
    • LDAP Injection
    • Redis
  • Pwn
    • Linux Exploitation
    • Windows Exploitation
    • Fuzzing
  • Reverse
    • Bytecode
    • πŸ‘‘Z3 solver
    • angr
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. Red Teamingchevron-right
  2. βœ…Privilege Escalationchevron-right
  3. Linux Privilege Escalation

Automated Tools

LinPEAS!

hashtag
My Hack The Box Pwnbox Setup Script

This user_init script sets up all the automated tools needed for Linux privilege escalation tasks:

LogoGitHub - ret2basic/Hack-The-Box-Pwnbox-Setup: Hack The Box Pwnbox setup scriptGitHubchevron-right
Hack The Box Pwnbox Setup

hashtag
LinPEAS

LogoPEASS-ng/linPEAS at master Β· peass-ng/PEASS-ngGitHubchevron-right
LinPEAS

Output to file:

Read with colors:

hashtag
LinEnum

LogoGitHub - rebootuser/LinEnum: Scripted Local Linux Enumeration & Privilege Escalation ChecksGitHubchevron-right
LinEnum

hashtag
Linux Exploit Suggester

LogoGitHub - The-Z-Labs/linux-exploit-suggester: Linux privilege escalation auditing toolGitHubchevron-right
Linux Exploit Suggester

hashtag
Linux Priv Checker

LogoGitHub - sleventyeleven/linuxprivchecker: linuxprivchecker.py -- a Linux Privilege Escalation Check ScriptGitHubchevron-right
Linux Priv Checker
PreviousManual Enumerationchevron-leftNextKernel Exploitschevron-right

Last updated 3 years ago

  • My Hack The Box Pwnbox Setup Script
  • LinPEAS
  • LinEnum
  • Linux Exploit Suggester
  • Linux Priv Checker
/tmp/linpeas.sh -a > /dev/shm/linpeas.txt
less -r /dev/shm/linpeas.txt