LinPEAS (Linux Privilege Escalation Awesome Script) is a comprehensive auditing tool designed to identify potential privilege escalation paths on Linux, Unix, and MacOS systems. It automates numerous checks, highlighting misconfigurations, known vulnerabilities, and sensitive information that could be exploited to gain elevated privileges.
Key features include:
- Automated Auditing: Performs a wide range of checks, from basic system information to advanced file permission analysis.
- Color-coded Output: Uses color-coding to highlight potential vulnerabilities and misconfigurations for easy identification.
- Customizable Checks: Allows users to select specific checks to tailor the scan to their needs, creating smaller and faster scripts.
- Stealth Mode: Offers a stealth mode to minimize the tool's footprint and avoid detection.
- Network Enumeration: Includes capabilities for host discovery and port scanning within the local network.
- Firmware Analysis: Can be used to analyze firmware images for passwords and misconfigured permissions.
LinPEAS is valuable for penetration testers, system administrators, and security auditors seeking to identify and remediate privilege escalation vulnerabilities.