A lightweight, automated local enumeration tool written in Go designed to audit Linux systems for potential privilege escalation vectors, misconfigurations, and sensitive data exposure.
- User Content Analysis: Analyzes the active session to detect current user privilages, UID, and GID parameters.
- Sudo Permission Check: Queries the system for passwordless or available sudo rights using non-interacative sudo validation.
- SUID Binary Enum: Recursively scans disk partitions while omitting pseudo-filesystems to flag dangerous or unexpected setuid executables.
- Account Enum: Parses local authentication files to list users configured with valid interactive command-line shells.
- Credential Exposure Check: Probes sensitive system file permissions to verify if restricted files like shadow storage are world-readable.
- Environment Variable Audit: Inspects runtime environment variables for insecure injection vectors, dangerous path configurations, and hardcoded secrets.
- Clone the repository.
git clone https://github.com/wreakdev/lpechk
cd lpechk- Build the binary.
make all install cleanThe binary will be installed to ~/.local/bin/lpechk. Ensure that this directory is in your system PATH.
[+]Informational status or succesfull checks.[!]Warnings or pontential points of interest.[!!!]Critical security findings or misconfigurations.
- Go (version 1.18 or higher recommended)
This tool is created for educational purposes and authorized security testing only. The author is not responsible for any misuse of this software. Always ensure you have permission to test the target domain before running this tool.
Contributions are welcome! If you'd like to help improve lpechk, please read the CONTRIBUTING.md file to understand how to get started, report bugs, or submit your own pull requests.