peass-ng/PEASS-ng

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

20381 stars · 3392 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

PEASS-ng is a suite of privilege escalation enumeration scripts (LinPEAS for Linux/Unix/macOS and WinPEAS for Windows) that scan local systems for misconfigurations and highlight potential escalation paths with color-coded output. It also includes parsers to convert results into JSON, HTML, and PDF reports.

Use cases

• enumerate local privilege escalation vectors on a Linux host
• find Windows misconfigurations that allow privilege escalation
• audit a machine for insecure permissions, SUID binaries, and scheduled tasks
• generate JSON or HTML reports from enumeration output during a pentest
• quickly assess a compromised box during an authorized red team engagement

When to choose

• you are doing authorized penetration testing or CTF challenges and need fast local enumeration
• you want a single script that works across Linux, macOS, and Windows with minimal dependencies
• you need colorized, easy-to-scan output highlighting likely privesc paths

When to avoid

• you need a full vulnerability scanner or remote network scanner rather than local enumeration
• you require a GUI-based auditing tool
• you cannot legally run offensive tooling on the target system

Facets

cli-tool · maturity active

security penetration-testing cli security penetration-testing windows cli privilege-escalation privesc linpeas winpeas enumeration red-team bash-script csharp command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="peass-ng/PEASS-ng")