LinPEAS
Linux privilege-escalation auditing script.
KaliParrotlow
pkg: peass-ng
LinPEAS enumerates a Linux host for privesc paths — SUID, capabilities, creds, misconfigs — with colour-coded risk.
Syntax
linpeas.sh
Example
./linpeas.sh | tee linpeas.txt
Runs all local privesc checks and highlights likely wins.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
linpeas
Usage examples
./linpeas.sh | tee linpeas.txt
Run and save privesc findings.
curl -L https://.../linpeas.sh | sh
Run in memory without writing to disk.
Advantages
- Comprehensive local privesc triage
- Colour-ranked output
Disadvantages
- Very noisy on disk/logs
- Long output
Tags
#privesc#linux#post-ex
Official docs: PEASS-ng ↗
Related commands
Frequently asked questions
What is LinPEAS used for?
LinPEAS enumerates a Linux host for privesc paths — SUID, capabilities, creds, misconfigs — with colour-coded risk.
What is an example LinPEAS command?
A common example is: ./linpeas.sh | tee linpeas.txt — Runs all local privesc checks and highlights likely wins.
Is LinPEAS part of Kali Linux?
Yes. LinPEAS ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install peass-ng.
What category of security tool is LinPEAS?
LinPEAS is a Vulnerability Analysis tool with a low-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.