rebootuser/LinEnum
LinEnum
LinEnum is a suite of security utilities for auditing Linux systems, scanning for privilege escalation paths, and enumerating local vulnerabilities. It functions as a system security audit tool, a local enumeration utility, and a scanner for identifying misconfigurations that could allow a user to gain root access.
The project includes specialized auditing for containerized environments, specifically detecting Docker and LXC signatures to identify potential escape vectors to the host system.
Its broader capabilities cover the analysis of kernel versions, the identification of SUID binaries and world-writable files, and the auditing of user and group permissions. The tool also performs secret scanning for private keys and cloud credentials, analyzes scheduled tasks and network services, and exports findings into text reports for offline analysis.
Features
- Linux Enumeration - Scans Linux systems for misconfigurations and vulnerabilities that allow a user to gain root access.
- Local System Enumeration Toolsets - Collects detailed information about kernel versions, running services, and network connections during assessments.
- Network and Process Enumeration - Analyzes active network sockets and running process lists to map exposed services and identify software versions.
- Exploitable Binary Detection - Identifies world-writable files and SUID binaries that could be exploited to gain unauthorized system access.
- FileSystem Vulnerability Scanning - Locates exploitable binaries and configuration files by scanning for SUID bits and world-writable permissions.
- OS Vulnerability Scanning - Scans kernel versions and distribution details to identify known operating system vulnerabilities and missing patches.
- Permission Auditing Tools - Searches system files and user permissions for leaked secrets, insecure binaries, and overly permissive settings.
- Privilege Escalation Analysis - Provides specialized analysis to identify potential paths for unauthorized elevation of privileges on Linux systems.
- Privilege Enumeration - Scans system configurations and kernel modules for misconfigurations allowing users to gain higher access levels.
- Security Auditing Tools - Performs a suite of checks on kernel versions, cron jobs, and SUID binaries to evaluate security posture.
- Privilege - Analyzes sudoers files and group memberships to determine effective user permissions and access levels.
- Vulnerability Matching - Compares the active operating system kernel version against known vulnerability databases to identify escalation paths.
- Container Detection - Identifies virtualized environments by probing for Docker and LXC process signatures and artifacts.
- Host-to-Container Execution - Detects Docker or LXC environments and identifies vulnerabilities used to move from a container to the host.
- Service Enumeration Tools - Enumerates running services and active network connections to identify outdated software and insecure configurations.
- Runtime Environment Detection - Checks system indicators to determine if the environment is running inside Docker or LXC containers.
- Container Escape Analysis - Analyzes LXC configurations to identify vulnerabilities that could allow a container escape to the host.
- Container Escape Auditors - Detects Docker and LXC environments to identify potential vulnerabilities for escaping to the host system.
- Secret Scanning - Searches files and configuration directories for private keys and cloud credentials using pattern matching.
- Sensitive File Discovery - Actively scans the filesystem to locate leaked private keys, cloud credentials, and sensitive backup files.
- Virtualization Detection - Identifies the presence of Docker or LXC containers to determine the available attack surface.
- Scheduled Task Auditing - Lists cron jobs and system timers to identify high-privilege tasks or world-writable scripts.
- Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
- Exploit Development - Script for Linux privilege escalation enumeration.
- Post Exploitation - Script for local Linux privilege escalation enumeration.
- Privilege Escalation - Enumerates Linux systems for privilege escalation.
- Privilege Escalation Tools - Script for local Linux enumeration.
