LinEnum

./LinEnum.sh -t -k <keyword>

Classic Linux enumeration script that gathers kernel info, users, SUID/SGID permissions, cron jobs, sudo capabilities, world-writable files, and credentials, with option to filter by keyword and generate a report.

When you prefer structured, exportable enumeration in a classic environment, without LinPEAS's flashiness. The -k parameter lets you search exactly what you're interested in (passwords, .ssh, keys) and -t runs the deeper checks. The -r report you can download and review offline.

If the host is modern and you want speed, LinPEAS gives you more coverage in a single pass. Also don't use it if the goal is minimal noise: it traverses many directories and leaves traces in atime/relatime that a blue team with osquery can correlate.