peass-ng/PEASS-ng
PEASS Ng
PEASS-ng is an automated penetration testing framework designed to identify privilege escalation vectors on local systems. It functions as a security assessment utility that scans environments for misconfigurations, sensitive files, and insecure permissions to uncover paths for unauthorized privilege elevation.
The project distinguishes itself through a modular script-based enumeration engine that adapts to the target environment. It utilizes environment-aware capability detection and cross-platform shell abstraction to normalize data collection across diverse operating systems, while operating primarily within volatile memory to minimize its forensic footprint.
The framework covers a broad range of post-exploitation assessment tasks, including automated security auditing for both Linux and Windows environments. It employs pattern-matching heuristic analysis to systematically query system configurations and identify security gaps during authorized security assessments.
Features
- Privilege Escalation Tools - Scans systems for misconfigurations and insecure permissions to identify paths for unauthorized privilege elevation.
- Penetration Testing Suites - Provides a suite of tools for security professionals to discover and exploit system weaknesses during penetration tests.
- Linux Enumeration - Identifies misconfigurations and insecure permissions on Linux systems to facilitate privilege escalation.
- Windows Enumeration - Scans Windows environments for weak configurations and sensitive data to discover paths for privilege elevation.
- Security Testing and Auditing - Automates comprehensive system checks to uncover vulnerabilities and security gaps across diverse environments.
- Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
- Offensive Security Tools - Suite of scripts for privilege escalation enumeration.
- Post-Exploitation Tools - Analyzes compromised systems to identify further escalation vectors and expand control after initial access.
- Memory-Only Execution - Operates primarily within volatile memory to avoid leaving permanent traces on the target system.
- Script Execution Engines - Provides an execution environment for modular shell scripts to systematically query system configurations.
- Plugin-Based Architectures - Organizes security checks into independent, loadable modules to allow selective execution based on target requirements.
