What is this?
PEASS-ng is a suite of local privilege escalation enumeration tools: LinPEAS for Linux/Unix/macOS and WinPEAS for Windows. They scan a machine for privesc paths and print misconfigurations with nice colors so you can spot them easily.
PEASS-ng is a suite of local privilege escalation enumeration tools: LinPEAS for Linux/Unix/macOS and WinPEAS for Windows. They scan a machine for privesc paths and print misconfigurations with nice colors so you can spot them easily.Is it one program, or a separate tool for each operating system?A suite of separate scripts: WinPEAS targets Windows as a C# .exe plus a .bat version, while LinPEAS is a .sh script covering Linux, Unix and macOS.
A suite of separate scripts: WinPEAS targets Windows as a C# .exe plus a .bat version, while LinPEAS is a .sh script covering Linux, Unix and macOS.How do I get it running on a machine?Grab the latest prebuilt binaries and scripts from the GitHub releases page and run the one matching your target: winpeas.exe or the .bat on Windows, linpeas.sh on Linux/Unix/macOS.
Grab the latest prebuilt binaries and scripts from the GitHub releases page and run the one matching your target: winpeas.exe or the .bat on Windows, linpeas.sh on Linux/Unix/macOS.Can I just run it on any machine I have access to?No. The author restricts the whole suite to authorized penetration testing and/or educational purposes only — use it on your own machines or with the owner's permission.
No. The author restricts the whole suite to authorized penetration testing and/or educational purposes only — use it on your own machines or with the owner's permission.Does it actually exploit what it finds?No — it only enumerates: the tools search for possible local privilege escalation paths and print them so you can recognize misconfigurations. Turning a finding into an exploit is left to you.
No — it only enumerates: the tools search for possible local privilege escalation paths and print them so you can recognize misconfigurations. Turning a finding into an exploit is left to you.Can I get the results in a machine-readable format?Yes. The parsers directory contains tools to transform PEASS output into JSON, HTML and PDF instead of the colored terminal text.
Yes. The parsers directory contains tools to transform PEASS output into JSON, HTML and PDF instead of the colored terminal text.Where can I learn the techniques behind its findings?The author points to the local privilege escalation checklists on book.hacktricks.wiki for Windows and Linux, and there is an official Linux privesc course for mastering LinPEAS.
The author points to the local privilege escalation checklists on book.hacktricks.wiki for Windows and Linux, and there is an official Linux privesc course for mastering LinPEAS.What are similar projects?dirsearch, PayloadsAllTheThings, Claude-AD, zphisher, nishang, Decepticon, webshell, Claude-Red
dirsearch, PayloadsAllTheThings, Claude-AD, zphisher, nishang, Decepticon, webshell, Claude-RedWhich topics is it in?color, redteam, infosec, script, offensive-security, unix, bash, pentesting, penetration-testing, hacking, c#, csharp
color, redteam, infosec, script, offensive-security, unix, bash, pentesting, penetration-testing, hacking, c#, csharp