PEASS-ng README

The project's README from github.com/peass-ng/PEASS-ng. As one markdown file: README.md.

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation

Linux Privesc official course to master LinPEAS

Check https://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS

Basic Tutorial

Tutorial

Here you will find privilege escalation tools for Windows and Linux/Unix* and MacOS.

These tools search for possible local privilege escalation paths that you could exploit and print them to you with nice colors so you can recognize the misconfigurations easily.

Quick Start

Find the latest versions of all the scripts and binaries in the releases page.

JSON, HTML & PDF output

Check the parsers directory to transform PEASS outputs to JSON, HTML and PDF

Join us!

If you are a PEASS & Hacktricks enthusiast, you can get your hands now on our custom swag and show how much you like our projects!

You can also, join the 💬 Discord group or the telegram group to learn about the latest news in cybersecurity and meet other cybersecurity enthusiasts, or follow me on Twitter 🐦 @hacktricks_live.

Let's improve PEASS together

If you want to add something and have any cool idea related to this project, please let me know it in the telegram group https://t.me/peass or contribute reading the CONTRIBUTING.md file.

Advisory

All the scripts/binaries of the PEAS suite should be used for authorized penetration testing and/or educational purposes only. Any misuse of this software will not be the responsibility of the author or of any other collaborator. Use it at your own machines and/or with the owner's permission.

PEASS-ng (peass-ng/PEASS-ng)

Searching Database…

20.7K ·GitHub
这是干什么的?PEASS-ng 是一套本地提权信息收集工具:LinPEAS 面向 Linux/Unix/macOS,WinPEAS 面向 Windows。它们会扫描机器上可用来提权的路径,并用醒目的颜色打印出配置错误,让你一眼就能发现。
它是一个程序,还是每个操作系统各有一个单独的工具?是由多个独立脚本组成的工具套件:WinPEAS 面向 Windows,提供 C# 编译的 .exe 和一个 .bat 版本;LinPEAS 则是一个 .sh 脚本,覆盖 Linux、Unix 和 macOS。
我怎么在一台机器上把它跑起来?从 GitHub releases 页面获取最新的预编译可执行文件和脚本,运行与你目标系统匹配的那个:Windows 上用 winpeas.exe 或 .bat,Linux/Unix/macOS 上用 linpeas.sh。
我可以随便在我能访问的任何机器上运行它吗?不行。作者将整个套件限定为仅用于经授权的渗透测试和/或教育目的——只能在你自己的机器上使用,或事先获得机器所有者的许可。
它会真的利用它发现的问题吗?不会——它只做信息收集:工具会搜索可能的本地提权路径并把它们打印出来,方便你识别配置错误。至于把发现的问题变成可用的漏洞利用,得由你自己来做。
我能拿到机器可读格式的结果吗?可以。parsers 目录里有工具,可以把 PEASS 的输出转换成 JSON、HTML 和 PDF,而不是带颜色的终端文本。
我在哪里能学到这些发现背后的技术?作者推荐查看 book.hacktricks.wiki 上针对 Windows 和 Linux 的本地提权检查清单,另外还有一门官方的 Linux 提权课程,可以帮你精通 LinPEAS。
Creator
peass-ng
Size
65.3 MB
Stars
20.7K
Age
7y
Commits · 90 Days