PEASS-ng is a privilege escalation enumeration toolkit that automates the discovery of potential privilege escalation vectors on Linux and Windows systems.
The toolkit addresses the challenge of identifying privilege escalation opportunities during security assessments and penetration tests. It works by running automated enumeration scripts that gather system information, check configurations, and highlight misconfigurations or weaknesses that could be exploited to escalate privileges. The suite includes separate tools for Linux systems and Windows systems, each tailored to the specific attack surface of that operating system. Output is color-coded to help users quickly identify the most critical findings.
The toolkit suits security professionals, penetration testers, and system administrators who need to assess privilege escalation risks on systems they own or have permission to test. It is designed for environments where rapid enumeration and visual clarity are priorities. Users should understand that PEASS-ng is an enumeration aid rather than an exploitation tool; it identifies potential vectors but does not execute attacks. The toolkit is most valuable when used as part of a broader security assessment workflow where findings can be investigated and validated in context.
The project maintains active development with regular updates to detection logic and new checks. The codebase shows consistent refinement of existing functionality rather than major architectural changes. Community contributions are integrated into the toolkit, expanding its coverage of privilege escalation techniques. The project demonstrates sustained attention to keeping detection methods current with evolving system configurations and security practices.
