Linux Exploit Suggester

Linux Exploit Suggester; based on operating system release number. As the name suggests, this is a Linux Exploit Suggester, with no frills and no fancy features; just a simple script to keep track of vulnerabilities and suggest possible exploits to use to gain ‘root‘ on a legitimate penetration test, or governing examining body

This program run without arguments will perform a ‘uname -r’ to grab the Linux Operating Systems release version, and return a suggestive list of possible exploits. Nothing fancy, so a patched/back-ported patch may fool this script.

Additionally possible to provide ‘-k’ flag to manually enter the Kernel Version/Operating System Release Version.

This script has been extremely useful on site and in exams. Now Open-sourced under GPLv2.

Sample Output

[su_quote]$ perl ./Linux_Exploit_Suggester.pl -k 3.0.0 Kernel local: 3.0.0 Possible Exploits:

[+] semtex CVE-2013-2094 Source: www.exploit-db.com/download/25444/‎

[+] memodipper CVE-2012-0056 Source: http://www.exploit-db.com/exploits/18411/

[+] perf_swevent CVE-2013-2094 Source: http://www.exploit-db.com/download/26131[/su_quote]

Download link: http://penturalabs.github.io/Linux_Exploit_Suggester/

Please follow and like us: