Linux Exploit Suggester is a privilege escalation auditing tool that identifies kernel vulnerabilities and security misconfigurations on Linux systems.
The tool addresses the problem of assessing whether a Linux system is vulnerable to known privilege escalation exploits. It works by using heuristic methods to match the target kernel against a database of publicly disclosed exploits, assigning exposure levels ranging from highly probable to improbable based on kernel version and configuration. Beyond exploit matching, it also verifies the state of kernel hardening security measures by checking both compile-time kernel configurations and runtime sysctl settings, providing a comprehensive security posture assessment.
The tool suits security auditors and penetration testers who need to quickly identify which known exploits might work against a target system. It is particularly useful during the reconnaissance phase of a security assessment when you have access to a Linux machine and want to understand its vulnerability surface without manual research. The tool can operate either against a live system or against a uname string, making it flexible for different assessment scenarios. It positions itself as a modern continuation of the kernel checking functionality found in checksec.sh.
The project accepts community contributions and maintains a separate resources repository for exploit data. Development activity shows ongoing engagement with the security research community through documentation of methodology in published papers and maintenance of the exploit database that underpins the tool's assessments.
