mzet-/linux-exploit-suggester
Linux Exploit Suggester
linux-exploit-suggester is a diagnostic utility and vulnerability scanner designed to identify potential kernel exploits on Linux systems. It functions as a privilege escalation auditor by matching system information and kernel versions against a database of known security flaws.
The tool differentiates itself by filtering and ranking exploits based on specific system properties and runtime security configurations. It evaluates kernel hardening settings, such as memory protection mechanisms, to discard inapplicable exploits and prioritize candidates by their probability of success.
The software covers a broad analytical surface including kernel vulnerability auditing, system exposure analysis, and the evaluation of compile-time and runtime configuration flags to assess a system's overall security posture.
Features
- Kernel Vulnerability Discovery - Finds known kernel vulnerabilities to elevate user permissions on a target Linux system.
- Hardening Mitigation Detection - Analyzes runtime security flags like SMEP and SMAP to determine if memory protection mechanisms block a specific exploit.
- Technical Requirement Filtering - Evaluates system properties, configuration flags, and shell command output to discard exploits that do not meet technical requirements.
- Kernel Configuration Assessments - Evaluates compile-time kernel settings and runtime parameters to assess the overall security posture of the target system.
- Exploit Requirement Filtering - Discards inapplicable exploits by evaluating specific system properties and configuration flags against required target criteria.
- Kernel Exploit Identification - Matches the kernel version and configuration against a database of known vulnerabilities to suggest applicable exploits.
- Kernel Security Auditors - Verifies compile-time configurations and runtime settings to assess the security posture of the running kernel.
- Kernel Security Audits - Analyzes kernel versions and configurations to identify security weaknesses and potential exploit vectors.
- Kernel Version Matching - Matches system version strings against databases of known vulnerable kernels to identify exploit candidates.
- Linux Kernel Vulnerability Scanners - Matches system information against a database of known Linux kernel exploits to suggest vulnerabilities.
- Privilege Escalation Analysis - Filters and ranks applicable exploits based on kernel version and runtime security configurations.
- Privilege Escalation Auditors - Analyzes kernel versions and system configurations to identify potential privilege escalation vulnerabilities on Linux.
- Security Auditing Tools - Evaluates kernel hardening settings and system exposure to public security flaws.
- Linux Security Hardening - Checks for active protections like SMEP and SMAP to determine if a system is resistant to exploits.
- Passive Exploit Identification - Identifies applicable exploits for a specific target environment without executing code on the remote machine.
- Exploit Reliability Ranking - Orders suggested exploits based on reliability, distribution matches, and version tags to highlight the most likely candidates.
- Exploit Probability Ranking - Orders suggested vulnerabilities by reliability and distribution matches to prioritize the most likely paths for privilege escalation.
- Kernel Security Analysis - Evaluates kernel vulnerability to known exploits by processing system information strings.
- System Profiling - Processes raw system information strings to evaluate vulnerabilities without requiring direct execution of code on the target.
- Exploit Development - Tool to suggest potential Linux kernel exploits for a system.
- Exploit Development Tools - Provides recommendations for kernel exploits based on system information.
- Exploit Suggesters - Tool for identifying potential kernel exploits based on version.
- Privilege Escalation - Suggests Linux kernel exploits based on version.
- Privilege Escalation Tools - Tool for auditing Linux systems for potential privilege escalation exploits.
