Linux Enumeration
Permissions
Sudo
sudo -l
# bash: command not found: sudo
find / -name sudo 2>/dev/null
SUID
find / -perm -4000 2>/dev/null
find / -perm -4000 -type f 2>/dev/null
find / -perm -4000 -ls 2>/dev/null
find / -perm -4000 -exec ls -l {} \; 2>/dev/null
Capabilities
/usr/sbin/getcap -r / 2>/dev/null
Writable
find / -writable 2>/dev/null
find / -writable 2>/dev/null | grep -viE "proc|sys|dev"
find / -writable -user low 2>/dev/null
Users
grep "sh$" /etc/passwd
Groups
id ; groups
cat /etc/group
getent group
getent group sudo
linPEAS
https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS
curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh | sh
Cron
https://github.com/DominicBreuker/pspy
cat /etc/crontab
./pspy
OS / Arch / Kernel
uname -a
cat /proc/version
cat /etc/issue
hostnamectl
lsb_release -a
arch