Linux Privesc Triage One-Liner

2026-08-06 bash Privilege Escalation

First 30 seconds on a Linux foothold: SUID binaries, sudo rights, writable cron, and kernel version — before reaching for linpeas.

bash

# quick manual sweep before dropping tooling
id; sudo -n -l 2>/dev/null                       # current creds + passwordless sudo
find / -perm -4000 -type f 2>/dev/null           # SUID binaries (check gtfobins)
getcap -r / 2>/dev/null                           # file capabilities
grep -R . /etc/cron* 2>/dev/null                  # cron jobs (writable script = win)
uname -a; cat /etc/os-release                     # kernel + distro for exploit-db