LinSpect v1.0 (Stable)

Release Notes

Version: 1.0
Author: MIDØ

Description:

LinSpect is a powerful and comprehensive tool for Linux system enumeration, privilege escalation, and exploit suggestion. Version 1.0 brings a wealth of new features, enhancements, and bug fixes to improve both its functionality and usability. The tool continues to be an essential asset for security professionals and system administrators seeking to identify vulnerabilities and misconfigurations in Linux systems.

Overview:

LinSpect is designed to assist in identifying potential security vulnerabilities and misconfigurations on Linux systems. This release introduces several new features, improvements, and bug fixes to enhance its functionality, making it an even more powerful tool for system enumeration and privilege escalation.

Key Changes and New Features:

1. Enhanced System Information Gathering:

New Checks Added:

• Sudo version check.
• PATH environment variable check.
• Date and uptime check.
• Unmounted file systems check.
• Disk information (lsblk) check.
• Environment variables check.
• Unexpected files in /opt and root directory checks.
• Modified files in the last 5 minutes check.
• Password search in history files (.bash_history, .zsh_history).

Improved Output:

• More detailed and structured output for system information.
• Risk level colors added for better visualization of critical issues.

2. User and Group Information Enhancements:

New Checks Added:

• PGP keys check.
• Sudo tokens and ptrace protection check.
• pkexec policy check.
• Superusers and users with console access check.

Improved Output:

• Better categorization of user and group information.
• Risk level colors for critical user-related issues (e.g., readable /etc/shadow).

3. Networking Information Enhancements:

New Checks Added:

• Ability to sniff with tcpdump check.

Improved Output:

• More detailed network information, including active connections and open ports.
• Risk level colors for critical network-related issues.

4. Exploit Suggestion Integration:

Linux Exploit Suggester:

• Integrated Linux Exploit Suggester script to suggest potential exploits based on the system's kernel version.
• Automatically downloads and runs the latest version of the Linux Exploit Suggester script.
• Highlights CVEs and potential vulnerabilities.

5. New Features:

• Keyword Search:
  Added a -k option to search for specific keywords in configuration and log files.

• Report Generation:
  Added a -r option to save output to a report file.

• Export Findings:
  Added a -o option to export findings to a specified directory.

• Thorough Scans:
  Added a -t option to perform thorough scans, which may take longer but provide more detailed results.

6. Bug Fixes & Improvements:

• Error Handling:
  Improved error handling for commands that may fail (e.g., missing binaries, permission issues).

• Output Formatting:
  Enhanced output formatting for better readability.

• Color Coding:
  Added more color codes for different risk levels (critical, high, medium, low, info, safe).

7. Removed Features:

• Nmap Scan:
  The Nmap scan functionality has been removed from the main script and is now a separate function (check_nmap).

• Kernel CVE Checks:
  Moved the kernel CVE checks to a separate function (check_kernel_cves).

Usage Changes:

• Quick Scan (-s): Performs a quick system scan, focusing on critical checks.
• Full Scan (-f): Default scan, running all checks.
• Exploit Checks (-e): Runs only exploit-related checks.
• Network Checks (-n): Runs only the network-related checks.
• User Checks (-u): Runs only the user and group-related checks.
• Thorough Scans (-t): Performs thorough scans for more detailed results.
• Keyword Search (-k): Searches for specific keywords in configuration and log files.
• Report Generation (-r): Saves output to a report file.
• Export Findings (-o): Exports findings to a specified directory.

Summary:

LinSpect v2 significantly enhances its capabilities, providing users with more detailed checks, better output formatting, and integrated exploit suggestion features. These additions make it a more powerful and comprehensive tool for Linux system enumeration and privilege escalation.

For more information or issues, contact the author: LIONMAD.

Disclaimer:

Always ensure you have authorization before running LinSpect on any system. Unauthorized use may be illegal and unethical.