PEASS-ng VS blackarch

Once on a system, something like Linpeas or Winpeas would be useful: https://github.com/carlospolop/PEASS-ng

Reject internet, embrace man. TBH it is not usefull at all, it is just in manual or embedded in kali, like basic webshells for example. It is cool to do such thing as a little free time project to learn about hosting and developing a website, but usefulnes for broader audience is minimal I think. For everyday use https://book.hacktricks.xyz are the best in my opinion.

I'm taking my OSCP exam next Wednesday and was just wondering on what tools are actually prohibited and which are not. I'm specifically referring to linpeas, winpeas, seatbelt. I often times run these tools when I've exausted my enumeration methods for a quick find. Are these tools allowed on the AD set and the individual machines?

Seems like a cart before horse situation. Why not just release the cheat sheet you have now and see how it does? I like Carlos Polop's approach with HackTricks -- https://book.hacktricks.xyz/ -- he offers previews of new content to his patrons.

Hi I don't understand the self.files attribute in this code: https://github.com/carlospolop/PEASS-ng/blob/master/linPEAS/builder/src/fileRecord.py

I'd recommend poking around at github and see what you find. A good starting point is WinPEAS if you're looking for automation. Seatbelt might also be helpful

Using linpeas I found some useful information over the user steven

Hi, BA repository content is mainly maintained by noptrix and me (noraj) nowadays (also other persons in the past). You can check the contributor graph. Anunna made only 3 commits and is more about community management on reddit and matrix than a package maintainer so don't fear backdoors lol

Kali Linux is fantastic but there are alternatives like Black-Arch

https://www.blackarch.org/ is the official BlackArch web site.

BlackArch - Arch GNU/Linux-based distribution for penetration testers and security researchers.

for me, arch have aur which have rich package and some package are from github. if you want to use for pentesting i think you can use blackarch, it has preinstalled tools for pentesting.

There seems to be two different existing blackarch distributions.. https://www.blackarch.org/