Step-by-step enumeration and pillaging checklist for every Linux box.
Find users, services, kernel details, and the most likely privilege escalation paths.
Accounts, groups, sudo rights, and user-based attack paths.
PAM, /etc/passwd, /etc/shadow, SSH keys, and sudo.
Read/write/execute, SUID/SGID, and permission misconfigurations.
Running processes, systemd services, cron, and service attack surface.
Interfaces, routing, pivot points, and reachable hosts.
Search the filesystem for credentials, configs, and sensitive data.
Disks, partitions, mount points, and device files.
Log sources, detection surface, and evidence you need to cover.
grep, awk, sed, cut, and shell pipelines for extracting the signal.
SELinux, AppArmor, patch posture, and hardening gaps.
Extract credentials, secrets, and sensitive data once you have access.
Variables, loops, functions, and practical automation patterns.