PEASS-ng
LinPEAS, WinPEAS, and macPEAS scripts that audit Linux, Windows, and macOS systems for privilege escalation paths and exposed credentials.
Technical Architecture & Overview
PEASS-ng bundles LinPEAS and WinPEAS privilege escalation audit scripts, and LinPEAS runs a MacPEAS mode automatically on macOS. Each script inspects system configuration, file permissions, and process states for paths that could lead to unauthorized access. The results help administrators close misconfigurations and harden endpoints before an adversary can misuse them.
Targeted Technical Use Cases
Authorized internal audits and hardening exercises on Linux, Windows, and macOS endpoints.
Evaluation & Trade-offs
Core Strengths
- +Covers Linux, Windows, and macOS in one project with color-coded output.
- +Actively maintained with frequent rule updates.
- +LinPEAS has no dependencies, and WinPEAS ships as a .exe and a .bat script.
Trade-Offs & Limitations
- -Reports possible escalation paths, which need manual confirmation.
- -Some optional checks, such as the user password brute force, are noisy on the target host.
- -Some checks need extra input, such as a user password for sudo -l checks.
Defensive Security Application
Use PEASS-ng to find and remediate privilege escalation paths before external assessments.
Frequently Asked Questions
What is PEASS-ng?→
PEASS-ng bundles LinPEAS and WinPEAS privilege escalation audit scripts, and LinPEAS runs a MacPEAS mode automatically on macOS. Each script inspects system configuration, file permissions, and process states for paths that could lead to unauthorized access. The results help administrators close misconfigurations and harden endpoints before an adversary can misuse them.
What is PEASS-ng used for?→
Authorized internal audits and hardening exercises on Linux, Windows, and macOS endpoints.
What are the strengths of PEASS-ng?→
- +Covers Linux, Windows, and macOS in one project with color-coded output.
- +Actively maintained with frequent rule updates.
- +LinPEAS has no dependencies, and WinPEAS ships as a .exe and a .bat script.
What are the limitations of PEASS-ng?→
- +Reports possible escalation paths, which need manual confirmation.
- +Some optional checks, such as the user password brute force, are noisy on the target host.
- +Some checks need extra input, such as a user password for sudo -l checks.
How is PEASS-ng used defensively?→
Use PEASS-ng to find and remediate privilege escalation paths before external assessments.