Giveen
c9055a7688
* Fix thread count override and add -z flag to set thread count * Enforce THREADS >= 1 after detection; validate -z range; clarify help text * Strip colours from -z warning; add regression tests for -z getopts/help * Tighten getopts regression test: match 'while getopts' line with regex * Fix WinPEAS network host discovery and port scanner bugs - Fix auto-mode NullReferenceException: change plain 'if' to 'else if' for IPAddressNetmask/IPAddressList branches in NetworkScanner.Scan(), so the auto path no longer falls through and calls AddRange(null) - Fix HostsAlive race condition in NetPinger: replace List<string> with ConcurrentBag<string> so concurrent async ping callbacks don't corrupt the collection - Fix unbound parallelism: cap outer host loop at MaxDegreeOfParallelism=5 and inner port loop at 50; create a PortScanner per host to remove shared-state concerns - Fix port scan output bypassing Beaprint: replace raw Console.WriteLine with Beaprint.GoodPrint so open-port results are colour-highlighted and respect -nocolor - Move network scan into NetworkInfo.PrintInfo(): add PrintNetworkScan() method, wire it into the check list when IsNetworkScan is true, remove the detached scan block from RunChecks(), expose NetworkScanOptions and PortScannerPorts as public, and remove the now-unused using directive * Add compiled binaries (x86/x64/Release), Directory.Build.targets Linux shim, fix Vault enum/struct casing * Fix -network/-ports arg parsing to accept space-separated values * Remove Directory.Build.targets from tracking; add to .gitignore * Dispose Ping per-attempt in NetPinger to prevent handle leaks on large sweeps * Fix TcpClient/WaitHandle leaks in PortScanner: use using block, close wait handle, remove stale AsyncCallback+TcpPortState * Force-select networkinfo check when -network is set with a subset of checks * Remove unused System.Threading.Tasks import from PortScanner * Add tests for space-separated -network/-ports arg normalisation * Remove Thread.Sleep(1) and unused System.Threading import from PortScanner * Replace BeginConnect/WaitOne APM with ConnectAsync+Wait(timeout) in PortScanner * Cap concurrent pings at 50 with SemaphoreSlim in NetPinger to prevent resource exhaustion on large ranges * Isolate per-IP ping exceptions so a single bad target can't abort the sweep; surface errors in debug mode * Observe timed-out ConnectAsync task via ContinueWith to prevent UnobservedTaskException * Broaden ParseOnly reset to cover all arg-parsing-mutable Checks fields to prevent test cross-talk * Add MainPrint/LinkPrint header to PrintNetworkScan; remove misplaced GreatPrint from NetworkScanner.Scan() * Add dedicated 'networkscan' system check to avoid running all NetworkInfo sub-checks when -network is passed with a subset * Delete linpeas_test.sh * Delete winPEAS/winPEASexe/binaries/Release/winPEAS.exe * Delete winPEAS/winPEASexe/binaries/x64/Release/winPEAS.exe * Delete winPEAS/winPEASexe/binaries/x86/Release/winPEAS.exe --------- Co-authored-by: SirBroccoli <carlospolop@gmail.com>
PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation
Basic Tutorial
Here you will find privilege escalation tools for Windows and Linux/Unix* and MacOS.
These tools search for possible local privilege escalation paths that you could exploit and print them to you with nice colors so you can recognize the misconfigurations easily.
-
Check the Local Windows Privilege Escalation checklist from book.hacktricks.wiki
-
WinPEAS - Windows local Privilege Escalation Awesome Script (C#.exe and .bat)
-
Check the Local Linux Privilege Escalation checklist from book.hacktricks.wiki
-
LinPEAS - Linux local Privilege Escalation Awesome Script (.sh)
Quick Start
Find the latest versions of all the scripts and binaries in the releases page.
JSON, HTML & PDF output
Check the parsers directory to transform PEASS outputs to JSON, HTML and PDF
Join us!
If you are a PEASS & Hacktricks enthusiast, you can get your hands now on our custom swag and show how much you like our projects!
You can also, join the 💬 Discord group or the telegram group to learn about the latest news in cybersecurity and meet other cybersecurity enthusiasts, or follow me on Twitter 🐦 @hacktricks_live.
Let's improve PEASS together
If you want to add something and have any cool idea related to this project, please let me know it in the telegram group https://t.me/peass or contribute reading the CONTRIBUTING.md file.
Advisory
All the scripts/binaries of the PEAS suite should be used for authorized penetration testing and/or educational purposes only. Any misuse of this software will not be the responsibility of the author or of any other collaborator. Use it at your own machines and/or with the owner's permission.