2.Linux-services-and-internals-enumeration

Network Information

ip a
cat /etc/hosts

User and Login Information

lastlog
w
history
find / -type f \( -name *_hist -o -name *_history \) -exec ls -l {} \; 2>/dev/null

Scheduled Tasks

ls -la /etc/cron.daily/
# Check other cron directories: /etc/cron.hourly, /etc/cron.weekly, /etc/cron.monthly, /etc/crontab, /var/spool/cron/crontabs

Process Information

find /proc -name cmdline -exec cat {} \; 2>/dev/null | tr " " "\n"
ps aux | grep root # Or other users

Installed Packages and Binaries

apt list --installed | tr "/" " " | cut -d" " -f1,3 | sed 's/[0-9]://g' | tee -a installed_pkgs.list
sudo -V
ls -l /bin /usr/bin/ /usr/sbin/
for i in $(curl -s https://gtfobins.github.io/ | html2text | cut -d" " -f1 | sed '/^[[:space:]]*$/d');do if grep -q "$i" installed_pkgs.list;then echo "Check GTFO for: $i";fi;done

System Calls

strace ping -c1 10.129.112.20

Configuration Files and Scripts

find / -type f \( -name *.conf -o -name *.config \) -exec ls -l {} \; 2>/dev/null
find / -type f -name "*.sh" 2>/dev/null | grep -v "src\|snap\|share"