> For the complete documentation index, see [llms.txt](https://docs.particle42.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.particle42.com/linux/linux-pe/enumeration-commands.md).

# Enumeration Commands

The following commands can be used for enumerating various information about the Operating System that can in turn be used for further exploiting or elevating privileges.

<details>

<summary>User Info</summary>

```
id #current user info
cat /etc/passwd #list of users and their groups
```

</details>

<details>

<summary>OS Version and Architecture</summary>

```
cat /etc/issue
cat /etc/*-release
uname -a
```

</details>

<details>

<summary>Running Processes &#x26; Services</summary>

```
ps axu
```

</details>

<details>

<summary>Firewall Statuses &#x26; Rules</summary>

```
cat /etc/iptables #Mostly requires root permissions, but sometimes these files are left with weak permissions
```

</details>

<details>

<summary>Scheduled Tasks</summary>

```
cat /etc/crontab
```

</details>

<details>

<summary>Installed Applications &#x26; Patch Levels</summary>

```
dpkg -l
```

</details>

<details>

<summary>Readable/Writable Files</summary>

```
find / -writable -type d 2>/dev/null
```

</details>

<details>

<summary>Unmounted Disks</summary>

```
cat /etc/fstab
/bin/lsblk
```

</details>

<details>

<summary>Device Drivers &#x26; Kernel Modules</summary>

```
lsmod
/sbin/modinfo <module name>
```

</details>

<details>

<summary>Binaries that Autoelevate</summary>

```
find / -perm -u=s -type f 2>/dev/null
```

</details>
