Lion Cipher Lab
Read LinPEAS output: find the Linux misconfigurations before an attacker does
- Penetration Testing / Red Team
- Intermediate
- ~40 min
- Free · no account required
Why it matters
An attacker who lands on a Linux box as a low-privilege user does exactly one thing next: they run an enumeration script like LinPEAS and read its output for a way up to root. As the defender, you win by reading that same output first — on a host you own — and closing every path before anyone else finds it. But the raw output is hundreds of lines of colour-highlighted findings, most of them harmless, and the skill that actually matters is triage: which highlighted line is a real road to root, which is background noise, and what is the concrete fix. This lab hands you a realistic LinPEAS…
What you'll learn
- reading LinPEAS's colour/severity highlighting (Red/Yellow = 99% privesc, Red = suspicious, Green = good)
- separating genuine privilege-escalation leads from informational noise
- recognising the classic Linux privesc misconfigurations in real tool output
- explaining WHY each finding is dangerous (what an attacker could do with it)
- remediating each: dropping a SUID bit, correcting a sudoers rule, fixing file permissions, rotating a leaked credential
- judgment: treating a highlight as a lead to verify, not a verdict — and prioritising the highest-severity issues first
- authorized-host discipline (read and remediate your own systems only)
Steps in this lab
- The one rule, and what LinPEAS actually is
- How to read LinPEAS's colours — the severity legend
- The report — read the whole thing once before triaging
- Lead 1 — the SUID bit on /usr/bin/find (Red/Yellow)
- Lead 2 — the NOPASSWD sudo rule on python3 (Red/Yellow)
- Lead 3 — world-writable /etc/passwd (Red/Yellow)
- Lead 4 — the root cron job running a world-writable script (Red/Yellow)
- Lead 5 — the plaintext credential in a config and history file (Red)
- The judgment: a highlight is a lead, not a verdict — and how a pro prioritises
- What you actually learned