peass-ng
Privilege Escalation Awesome Scripts SUITE (peass-ng) provides tools for Windows, Linux/Unix, and MacOS to identify local privilege escalation paths. These scripts search for misconfigurations and display them with color coding for easy recognition.
Description
peass-ng is a comprehensive suite of privilege escalation tools designed for post-exploitation scenarios across multiple operating systems including Windows, Linux/Unix, and MacOS. The tools automatically enumerate potential privilege escalation vectors by analyzing system configurations, permissions, services, and other common misconfigurations that could allow a user to gain elevated privileges.
The suite includes specialized tools like linpeas for Linux/Unix systems and winpeas for Windows environments. These scripts provide color-coded output to highlight critical findings, making it easier for security professionals to quickly identify exploitable conditions during penetration testing and red team engagements.
Installation provides access to all binaries and scripts organized in /usr/share/peass/, with separate directories for linpeas and winpeas components supporting various architectures and execution methods.
How It Works
peass-ng tools perform automated system enumeration to detect privilege escalation opportunities. They scan for common misconfigurations including SUID binaries, writable configuration files, weak permissions, vulnerable services, cron jobs, and other privilege escalation vectors. The scripts use color-coded output to categorize findings by severity and exploitability. Linpeas supports multiple Linux architectures (386, amd64, arm, arm64) and MacOS (darwin), while winpeas provides both batch, PowerShell, and multiple executable formats for Windows (x86, x64, any).
Installation
sudo apt install peassFlags
Examples
linpeas -hpeass -hwinpeas -hls /usr/share/peass/linpeasls /usr/share/peass/winpeassudo apt install peass