ENNAENNA

LinPEAS vs SSH-Snake

GitHub Stats

19.7k
Stars
2.3k
3.4k
Forks
217
3
Issues
0
5d ago
Updated
1mo ago
-
License
GPL-3.0
Shell
Language
Shell

About LinPEAS

LinPEAS (Linux Privilege Escalation Awesome Script) is a comprehensive enumeration script that searches for possible paths to escalate privileges on Linux hosts. It checks for misconfigurations, SUID/SGID binaries, writable files, cron jobs, kernel exploits, interesting files, credentials in configuration files, and much more. LinPEAS is part of the PEASS-ng suite which also includes WinPEAS for Windows. It's the first tool most pentesters run after gaining initial access to a Linux system.

About SSH-Snake

SSH-Snake is a self-propagating tool that automatically discovers SSH private keys on a compromised system, determines which hosts they connect to, and uses them to hop to the next system. It operates filelessly by passing itself through SSH sessions, leaving minimal forensic artifacts. SSH-Snake recursively maps the network of systems reachable via SSH trust relationships, building a graph of infrastructure connectivity. It discovers keys in common locations, agent forwarding sockets, bash history, known_hosts files, and SSH configs. Useful for demonstrating the blast radius of a single compromised host.

Platform Support

๐Ÿงlinux
๐Ÿงlinux๐ŸŽmacos

Tags

LinPEAS only

privescenumerationlinuxsuid

SSH-Snake only

sshlateral-movementself-propagatingkey-discoveryfileless