PEASS (lin/winPEAS)
Automated enumeration of escalation vectors (Linux/Windows).
The PEASS suite (linPEAS for Linux, winPEAS for Windows): scripts that automatically enumerate every privilege-escalation vector and colour-highlight them by likelihood. The first step after landing a user shell.
Family Privilege escalation
Flags -a (winPEAS) / linpeas.sh
Concepts Abusing SUID binaries, setfacl abuse via sudo
Cheatsheet Enumeration
Installation
# linPEAS / winPEAS: upload and run on the victimUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- BoardLightHackTheBox
- BuffHackTheBox
- ChemistryHackTheBox
- DC-1VulnHub
- HunitProving Grounds Practice
- InstantHackTheBox
- MonitorsThreeHackTheBox
- MonsterProving Grounds Practice
- NibblesProving Grounds Practice
- RoquefortProving Grounds Practice
- SaunaHackTheBox
- ShenziProving Grounds Practice
- SnookumsProving Grounds Practice
- TricksterHackTheBox
- Vulnerable Lab (1 · 4 · 5)VulnHub