Slippery Penguin

Slippery Penguin is intended strictly for use on systems you own or have explicit authorization to test. This tool is provided for educational and security research purposes only. The author assumes no liability for misuse or damage caused by this tool. Use responsibly and in accordance with all applicable local, state, and federal laws.

Slippery Penguin is a local privilege escalation tool for Linux Systems. It enumerates SUID binaries, checks capabilities, traces execution calls, and analyzes binary strings, checking the results against a ranked list of possible indicators for exploration.

Version:
This is v2.2.0, the official release.

Features:
-SUID binary enumeration across the filesystem
-Capability checking via getcap
-Execution call tracing via strace
-Binary string analysis against a severity rated watchlist
-Configurable path filtering and timeout handling
-JSON Logging
-Automatic updating and update checking -Automatic GTFOBins data comparison

Requirements:
-Linux
-Python 3
-strace
-getcap
-curl
-git

The JSON files are stored in /SlipperyPenguin/logs, within timestamped directories. Each form of output has it's own json file within the timestamped directory.

Note: The curl command will download the official release, not the dev branch. Quick installation-

curl -L https://eclecticelectronics.fly.dev/api/download/2.2.0 -o slipperypenguin-2.2.0.tar.gz
sha256sum slipperypenguin-2.2.0.tar.gz

Or

git clone -b master https://github.com/stlynnxx/Slippery-Penguin.git
cd Slippery-Penguin
chmod +x setup.sh
sudo ./setup.sh

Usage:

To write output to log files only-

python3 slipperypenguin.py --output logs

OR

python3 slipperypenguin.py -o logs

To write output to the terminal only-

python3 slipperypenguin.py --output terminal

OR

python3 slipperypenguin.py -o terminal

To write output to both the log files and the terminal-

python3 slipperypenguin.py --output both

OR

python3 slipperypenguin.py -o both

To update the GTFOBins data:

python3 slipperypenguin.py --update-gtfobins

OR

python3 slipperypenguin.py -upgt

To delete logs and then run the program-

python3 slipperypenguin.py --del-logs run

OR

python3 slipperypenguin.py -dl run

NOTE: This will result in leaving logs in the directory still, it will just be limited to that run.

To delete logs without running the program after-

python3 slipperypenguin.py --del-logs close

OR

python3 slipperypenguin.py -dl close

To bring up the help menu-

python3 slipperypenguin.py --help

OR

python3 slipperypenguin.py -h

To change the default timeout value-

python3 slipperypenguin.py --timeout 

OR

python3 slipperypenguin.py -t

Cleanup Logs-

python3 slipperypenguin.py --cleanup

OR

python3 slipperypenguin.py -c

Update the Program and run afterwards

python3 slipperypenguin.py --update run

OR

python3 slipperypenguin.py -u

Update the Program and Close

python3 slipperypenguin.py --update close

OR

python3 slipperypenguin.py -u close

Update the Program and Run

python3 slipperypenguin.py --update run

OR

python3 slipperypenguin.py -u run

Donations

I am physically disabled and do this and hardware repair to support myself; if you feel generous and can afford to do so, every penny helps out!

Contributing

Slippery Penguin is always open for contributions!

Check out the dev branch if you want to contribute to the newest features (you can read my daily work and goals in the notes file), or check out the issues list!

If you find a bug in the current master release, I would check the dev version to see if it's been fixed but not yet released on master before submitting a PR. I really prefer for contributions to come on the dev branch, but will not automatically reject them on master.