ENNAENNA

LinPEAS vs PrivescCheck

GitHub Stats

19.7k
Stars
3.8k
3.4k
Forks
500
3
Issues
4
5d ago
Updated
11d ago
-
License
BSD-3-Clause
Shell
Language
PowerShell

About LinPEAS

LinPEAS (Linux Privilege Escalation Awesome Script) is a comprehensive enumeration script that searches for possible paths to escalate privileges on Linux hosts. It checks for misconfigurations, SUID/SGID binaries, writable files, cron jobs, kernel exploits, interesting files, credentials in configuration files, and much more. LinPEAS is part of the PEASS-ng suite which also includes WinPEAS for Windows. It's the first tool most pentesters run after gaining initial access to a Linux system.

About PrivescCheck

PrivescCheck is a PowerShell script that enumerates common Windows privilege escalation vectors. It checks for misconfigured services (unquoted paths, weak permissions, writable binaries), vulnerable scheduled tasks, exploitable registry keys, stored credentials (Windows Vault, GPP passwords, autologon), DLL hijacking opportunities, AlwaysInstallElevated policies, and dozens of other escalation paths. Unlike automated exploitation tools, PrivescCheck only enumerates and reports findings, allowing the tester to understand and manually exploit each vector. Output is color-coded by severity with detailed remediation guidance.

Platform Support

🐧linux
🪟windows

Tags

Shared

enumeration

LinPEAS only

privesclinuxsuid

PrivescCheck only

privilege-escalationwindowssecurity-auditpowershell