LinPEAS
https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/linPEAS
To run it, make sure it’s on your target machine (linpeas.sh) and then run it: ./linpeas.sh
- Red/Yellow colored words – 99% chance it’s a priv esc attack vector
- Rred – need to take a look at
Linux Exploit Suggester
https://github.com/mzet-/linux-exploit-suggester
Will list CVE’s that might work on the box.