./LinEnum.sh -s -k keyword -r report -e /tmp/ -t
OPTIONS:-k Enter keyword
-e Enter export location
-t Include thorough (lengthy) tests
-s Supply current user password to check sudo perms (INSECURE)
-r Enter report name
-h Displays this help text
主要做了信息收集,其中包含了可提权项,主要支持功能如下,其中可以提权的检测项标红表示。
High-level summary of the checks/tasks performed by LinEnum:
Kernel and distribution release details
System Information:
Hostname
Networking details:
Current IP
Default route details
DNS server information
User Information:
Current user details
Last logged on users
Shows users logged onto the host
List all users including uid/gid information
List root accounts
Extracts password policies and hash storage method information