Repository Analysis

peass-ng/PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

7.6 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of peass-ng/PEASS-ng, a C# project with 20,140 GitHub stars. SynthScan v2.0 examined 292,576 lines of code across 1502 source files, recording 2218 pattern matches distributed across 15 syntactic categories. The overall adjusted score of 7.6 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

7.6
Adjusted Score
7.6
Raw Score
100%
Time Factor
2026-07-08
Last Push
20.1K
Stars
C#
Language
292.6K
Lines of Code
1.5K
Files
2.2K
Pattern Hits
2026-07-14
Scan Date
0.01
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 6HIGH 4MEDIUM 30LOW 2178

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 2218 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Over-Commented Block2072 hits · 1879 pts
SeverityFileLineSnippetContext
LOWlinPEAS/builder/README.md41## How to add new modulesCOMMENT
LOW…der/linpeas_parts/2_container/2_List_mounted_tokens.sh1# Title: Container - List mounted tokensCOMMENT
LOW…r/linpeas_parts/2_container/7_RW_bind_mounts_nosuid.sh1# Title: Container - Writable bind mounts without nosuid (SUID risk)COMMENT
LOW…inpeas_parts/2_container/4_Docker_container_details.sh1# Title: Container - Docker Container detailsCOMMENT
LOW…ilder/linpeas_parts/2_container/3_Container_details.sh1# Title: Container - Container detailsCOMMENT
LOW…builder/linpeas_parts/2_container/1_Container_tools.sh1# Title: Container - Container ToolsCOMMENT
LOW…builder/linpeas_parts/2_container/1_Container_tools.sh21# - Privileged tool exploitationCOMMENT
LOW…lder/linpeas_parts/2_container/5_Container_breakout.sh1# Title: Container - Container & breakout enumerationCOMMENT
LOW…npeas_parts/7_software_information/Browser_profiles.sh1# Title: Software Information - Browser ProfilesCOMMENT
LOW…ilder/linpeas_parts/7_software_information/Logstash.sh1# Title: Software Information - LogstashCOMMENT
LOW…S/builder/linpeas_parts/7_software_information/Pamd.sh1# Title: Software Information - Pam.dCOMMENT
LOW…r/linpeas_parts/7_software_information/Apache_nginx.sh1# Title: Software Information - Apache-NginxCOMMENT
LOW…ilder/linpeas_parts/7_software_information/Kerberos.sh1# Title: Software Information - KerberosCOMMENT
LOW…r/linpeas_parts/7_software_information/PHP_Sessions.sh1# Title: Software Information - PHP SessionsCOMMENT
LOW…peas_parts/7_software_information/1_Useful_software.sh1# Title: Software Information - Useful SoftwareCOMMENT
LOW…er/linpeas_parts/7_software_information/2_Compilers.sh1# Title: Software Information - CompilersCOMMENT
LOW…npeas_parts/7_software_information/Cached_AD_hashes.sh1# Title: Software Information - Cached AD HashesCOMMENT
LOW…lder/linpeas_parts/7_software_information/Vault_ssh.sh1# Title: Software Information - Vault-sshCOMMENT
LOW…der/linpeas_parts/7_software_information/Kcpassword.sh1# Title: Software Information - kcpasswordCOMMENT
LOW…AS/builder/linpeas_parts/7_software_information/Ssh.sh1# Title: Software Information - ssh filesCOMMENT
LOW…builder/linpeas_parts/7_software_information/Splunk.sh1# Title: Software Information - SplunkCOMMENT
LOW…lder/linpeas_parts/7_software_information/Log4shell.sh1# Title: Software Information - Searching Log4Shell vulnerable librariesCOMMENT
LOW…/builder/linpeas_parts/7_software_information/Mysql.sh1# Title: Software Information - MysqlCOMMENT
LOW…uilder/linpeas_parts/7_software_information/FreeIPA.sh1# Title: Software Information - FreeIPACOMMENT
LOW…ilder/linpeas_parts/7_software_information/Awsvault.sh1# Title: Software Information - Check aws-vaultCOMMENT
LOW…der/linpeas_parts/7_software_information/Postgresql.sh1# Title: Software Information - PostgreSQLCOMMENT
LOW…arts/7_software_information/PackageKit_Pack2TheRoot.sh1# Title: Software Information - PackageKit Pack2TheRoot (CVE-2026-41651)COMMENT
LOW…linpeas_parts/7_software_information/Extra_software.sh1# Title: Software Information - Extra sotftareCOMMENT
LOW…der/linpeas_parts/7_software_information/Containerd.sh1# Title: Software Information - containerd installedCOMMENT
LOW…inpeas_parts/7_software_information/Screen_sessions.sh1# Title: Software Information - Screen sessionsCOMMENT
LOW…uilder/linpeas_parts/7_software_information/YubiKey.sh1# Title: Software Information - YubiKey athenticationCOMMENT
LOW…S/builder/linpeas_parts/7_software_information/Tmux.sh1# Title: Software Information - TmuxCOMMENT
LOW…S/builder/linpeas_parts/7_software_information/Runc.sh1# Title: Software Information - RuncCOMMENT
LOW…builder/linpeas_parts/7_software_information/Gitlab.sh1# Title: Software Information - GitlabCOMMENT
LOW…uilder/linpeas_parts/7_software_information/PGP_GPG.sh1# Title: Software Information - PGP-GPGCOMMENT
LOW…uilder/linpeas_parts/7_software_information/Dovecot.sh1# Title: Software Information - DovecotCOMMENT
LOW…builder/linpeas_parts/7_software_information/Docker.sh1# Title: Software Information - DockerCOMMENT
LOW…S/builder/linpeas_parts/7_software_information/SKey.sh1# Title: Software Information - S/Key athenticationCOMMENT
LOW…ts/7_software_information/Postgresql_Event_Triggers.sh1# Title: Software Information - PostgreSQL Event TriggersCOMMENT
LOW…oftware_information/3_Macos_writable_installed_apps.sh1# Title: Software Information - MacOS writable Installed ApplicationsCOMMENT
LOW…cs_crons_timers_srvcs_sockets/17_Deleted_open_files.sh1# Title: Processes & Cron & Services & Timers - Deleted open filesCOMMENT
LOW…_crons_timers_srvcs_sockets/16_Crontab_UI_misconfig.sh1# Title: Processes & Cron & Services & Timers - Crontab UI (root) MisconfigurationCOMMENT
LOW…4_procs_crons_timers_srvcs_sockets/1_List_processes.sh1# Title: Processes & Cron & Services & Timers - List processesCOMMENT
LOW…procs_crons_timers_srvcs_sockets/15_Rcommands_trust.sh1# Title: Processes & Cron & Services & Timers - Legacy r-commands and host-based trustCOMMENT
LOW…4_procs_crons_timers_srvcs_sockets/14_DBus_analysis.sh1# Title: Processes & Cron & Services & Timers - D-Bus AnalysisCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh1# Title: Processes & Cron & Services & Timers - Socket Files AnalysisCOMMENT
LOW…rons_timers_srvcs_sockets/13_Unix_sockets_listening.sh1# Title: Processes & Cron & Services & Timers - Unix Sockets AnalysisCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/10_Services.sh1# Title: Processes & Cron & Services & Timers - Services and Service FilesCOMMENT
LOW…imers_srvcs_sockets/5_Files_open_process_other_user.sh1# Title: Processes & Cron & Services & Timers - Files opened by processes belonging to other usersCOMMENT
LOW…_timers_srvcs_sockets/8_Macos_launch_agents_daemons.sh1# Title: Processes & Cron & Services & Timers - Third party LaunchAgents & LaunchDemonsCOMMENT
LOW…s_crons_timers_srvcs_sockets/6_Different_procs_1min.sh1# Title: Processes & Cron & Services & Timers - Different processes 1 minCOMMENT
LOW…parts/4_procs_crons_timers_srvcs_sockets/11_Systemd.sh1# Title: System Information - SystemdCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh1# Title: Processes & Cron & Services & Timers - System TimersCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh1# Title: Processes & Cron & Services & Timers - Cron jobs and WildcardsCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh161COMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh181COMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh201 COMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh241 # [ -z "$job_id" ] && continueCOMMENT
LOW…crons_timers_srvcs_sockets/2_Process_cred_in_memory.sh1# Title: Processes & Cron & Services & Timers - Processes with credentials inside memoryCOMMENT
LOW…crons_timers_srvcs_sockets/3_Process_binaries_perms.sh1# Title: Processes & Cron & Services & Timers - Process binaries permissionsCOMMENT
2012 more matches not shown…
Hallucination Indicators6 hits · 90 pts
SeverityFileLineSnippetContext
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs624 /// <c>System.Web.Mvc.Html.ChildActionExtensions.RenderAction(HtmlHelper, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs642 /// <c>System.Web.Mvc.Html.ChildActionExtensions.RenderAction(HtmlHelper, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs661 /// <c>System.Web.Mvc.Html.ChildActionExtensions.RenderAction(HtmlHelper, String, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs694 /// <c>System.Web.Mvc.Html.RenderPartialExtensions.RenderPartial(HtmlHelper, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs708 /// <c>System.Web.Mvc.Html.DisplayExtensions.DisplayForModel(HtmlHelper, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs716 /// <c>System.Web.Mvc.Html.EditorExtensions.EditorForModel(HtmlHelper, String)</c>.COMMENT
Redundant / Tautological Comments50 hits · 74 pts
SeverityFileLineSnippetContext
LOW…/builder/linpeas_parts/7_software_information/Mysql.sh135 # Check if MySQL is running as root and if the version is either 4.x or 5.xCOMMENT
LOW…4_procs_crons_timers_srvcs_sockets/1_List_processes.sh182 # Check if we can access the FD but not the target fileCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh39 # Check if socket file is writable (following symlinks)COMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh59 # Check if executable is writable (following symlinks)COMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh89 # Check if listener path is writable (following symlinks)COMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/10_Services.sh25 # Check if service runs with elevated privilegesCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/10_Services.sh76 # Check if service file is writable (following symlinks)COMMENT
LOW…_timers_srvcs_sockets/8_Macos_launch_agents_daemons.sh80 # Check if plist is writableCOMMENT
LOW…_timers_srvcs_sockets/8_Macos_launch_agents_daemons.sh92 # Check if program is writableCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh28 # Check if the service runs with elevated privilegesCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh71 # Check if timer file is writable (following symlinks)COMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh120 # Check if timer file is writableCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh51 # Check if it's a regular fileCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh54 # Check if it's writable and executableCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh162 # # Check if the file is writableCOMMENT
LOW…crons_timers_srvcs_sockets/3_Process_binaries_perms.sh31 # Check if binary is writableCOMMENT
LOW…imers_srvcs_sockets/4_Processes_PPID_different_user.sh55 # Check if users are different and PPID user is not rootCOMMENT
LOW…der/linpeas_parts/linpeas_base/1_check_network_jobs.sh89 #Check if IP and Netmask are correct and the use nc to find hosts. By default check ports: 22 80 443 445 3389COMMENT
LOW…der/linpeas_parts/linpeas_base/1_check_network_jobs.sh158 #Check if IP and Netmask are correct and the use fping or ping to find hostsCOMMENT
LOW…der/linpeas_parts/linpeas_base/1_check_network_jobs.sh249 #Check if LOCAL_PORT is a numberCOMMENT
LOW…der/linpeas_parts/linpeas_base/1_check_network_jobs.sh254 #Check if REMOTE_PORT is a numberCOMMENT
LOW…AS/builder/linpeas_parts/6_users_information/9_Doas.sh46 # Check if doas is workingCOMMENT
LOW…lder/linpeas_parts/8_interesting_perms_files/1_SUID.sh67 if [ ${#sline_first} -gt 2 ] && command -v "$sline_first" 2>/dev/null | grep -q '/' && echo "$sline_fiCODE
LOW…lder/linpeas_parts/8_interesting_perms_files/2_SGID.sh61 if [ ${#sline_first} -gt 2 ] && command -v "$sline_first" 2>/dev/null | grep -q '/'; then #Check if exCODE
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh31 # Check if inetd is installedCOMMENT
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh37 # Check if inetd is runningCOMMENT
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh71 # Check if xinetd is installedCOMMENT
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh77 # Check if xinetd is runningCOMMENT
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh106 # Check if service is enabledCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh31 # Check if iptables is availableCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh37 # Check if we have permission to list rulesCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh74 # Check if nft is availableCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh80 # Check if we have permission to list rulesCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh110 # Check if firewall-cmd is availableCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh116 # Check if firewalld is runningCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh150 # Check if ufw is availableCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh156 # Check if UFW is runningCOMMENT
LOWlinPEAS/builder/src/linpeasModule.py177 # Check if the indicated dependencies are actually being usedCOMMENT
LOWlinPEAS/builder/src/linpeasModule.py199 # Check if all variables are correctly definedCOMMENT
LOWlinPEAS/builder/src/linpeasModule.py231 # Check if other object is an instance of LinpeasModuleCOMMENT
LOWlinPEAS/builder/src/linpeasModule.py252 # Check if item is already a LinpeasModule object.COMMENT
LOWlinPEAS/builder/src/linpeasBaseBuilder.py156 sorted_funcs.index(d_func) # Check if it's thereCODE
LOWlinPEAS/builder/src/linpeasBaseBuilder.py195 sorted_vars.index(d_var) # Check if it's thereCODE
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs8 # Check if appcmd.exe existsCOMMENT
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs34 # Check if credentials existsCOMMENT
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs55 # Check if credentials existsCOMMENT
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs62 # Check if any passwords were foundCOMMENT
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs64 # Display results in list view that can feed into the pipelineCOMMENT
LOWbuild_lists/sensitive_files.yaml123 check_extra_path: "" #Check if the found files are in a specific path (only linpeas)CODE
LOW.github/workflows/artifacts_cleanup.yml14 expire-in: 1days # Set this to 0 to delete all artifactsCODE
Decorative Section Separators16 hits · 48 pts
SeverityFileLineSnippetContext
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs10 // ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs12 // ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs33 // ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs35 // ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs55 // ─── Helpers ───────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs159 // ─── Main entry ───────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py13 # ─── Section 1: System Information ────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py29 # ─── Section 2: Container ─────────────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py36 # ─── Section 3: Cloud ─────────────────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py51 # ─── Section 4: Processes / Crons / Timers / Services / Sockets ───────────COMMENT
MEDIUMscripts/add_mitre_tags.py69 # ─── Section 5: Network Information ───────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py81 # ─── Section 6: Users Information ─────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py100 # ─── Section 7: Software Information ──────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py132 # ─── Section 8: Interesting Permissions / Files ────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py150 # ─── Section 9: Interesting Files ─────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py180 # ─── Section 10: API Keys Regex ───────────────────────────────────────────COMMENT
Hyper-Verbose Identifiers24 hits · 26 pts
SeverityFileLineSnippetContext
LOWlinPEAS/tests/test_builder.py24 def test_small_build_creates_executable(self):CODE
LOWlinPEAS/tests/test_builder.py32 def test_include_exclude_modules(self):CODE
LOWlinPEAS/tests/test_builder.py40 def test_exclude_matches_module_ids_case_insensitively(self):CODE
LOWlinPEAS/tests/test_builder.py57 def test_copyfail_python_probe_removes_temp_script(self):CODE
LOWlinPEAS/tests/test_builder.py100 def test_threads_flag_present_in_getopts(self):CODE
LOWlinPEAS/tests/test_builder.py119 def test_threads_flag_present_in_help_text(self):CODE
LOWlinPEAS/tests/test_builder.py128 def test_mitre_flag_present_in_getopts(self):CODE
LOWlinPEAS/tests/test_builder.py144 def test_mitre_flag_present_in_help_text(self):CODE
LOWlinPEAS/tests/test_builder.py153 def test_mitre_filter_function_present(self):CODE
LOWlinPEAS/tests/test_builder.py182 def test_mitre_parent_filter_matches_subtechnique(self):CODE
LOWlinPEAS/tests/test_builder.py188 def test_mitre_subtechnique_filter_does_not_match_parent(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py31 def test_check_module_id_matches_filename(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py48 def test_module_ids_are_unique(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py56 def test_module_shell_snippets_are_syntactically_valid(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py68 def test_declared_function_dependencies_exist(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py83 def test_declared_global_variable_dependencies_exist(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py104 def test_sudo_l_check_is_bounded_for_non_interactive_runs(self):CODE
LOWlinPEAS/builder/src/linpeasBuilder.py395 def __generate_regexes_search(self) -> str:CODE
LOWwinPEAS/winPEASexe/winPEAS/TaskScheduler/TaskService.cs1025 private static class ConnectionDataManagerCODE
LOWbuild_lists/update_windows_version_defs.py344def fetch_msrc_update_catalog(*, timeout: int, retries: int) -> list[dict[str, Any]]:CODE
LOWbuild_lists/update_windows_version_defs.py359def product_map_from_document(document: dict[str, Any]) -> dict[str, str]:CODE
LOWbuild_lists/update_windows_version_defs.py372def extract_msrc_entries_from_document(document: dict[str, Any]) -> list[RawEntry]:CODE
LOWbuild_lists/update_windows_version_defs.py455def extract_exploit_ids_from_feed(payload: bytes, *, year: int) -> set[str]:CODE
LOWmetasploit/peass.rb337function DecryptStringFromBytesAes([String] $key, [String] $iv, [String] $encrypted) {CODE
Excessive Try-Catch Wrapping15 hits · 22 pts
SeverityFileLineSnippetContext
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh54except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh64except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh81except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh115 except Exception as e:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh154 except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh208except Exception as e:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh213 except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh220 except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh227 except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh233 except Exception:CODE
MEDIUMparsers/json2pdf.py159 print("Error: Please pass the peas.json file and the path to save the pdf\njson2pdf.py <json_file> <pdf_file.pdfCODE
MEDIUMparsers/json2html.py344 print("Error: Please pass the peas.json file and the path to save the html\npeas2html.py <json_file.json> <HTML_CODE
MEDIUMparsers/peas2json.py184 print("Error: Please pass the peas.out file and the path to save the json\npeas2json.py <output_file> <json_fileCODE
MEDIUMbuild_lists/download_regexes.py21 print("Error: Unable to download the regexes file.")CODE
LOW.github/workflows/chack-agent-pr-triage.yml195 except Exception:CODE
Self-Referential Comments4 hits · 16 pts
SeverityFileLineSnippetContext
MEDIUM.github/workflows/CI-master_tests.yml487 # Create the releaseCOMMENT
MEDIUMmetasploit/peass.rb353 # Create a RijndaelManaged objectCOMMENT
MEDIUMmetasploit/peass.rb362 # Create an encryptor to perform the stream transform.COMMENT
MEDIUMmetasploit/peass.rb365 # Create the streams used for encryption.COMMENT
Synthetic Comment Markers2 hits · 15 pts
SeverityFileLineSnippetContext
HIGH…AS/winPEASexe/winPEAS/Properties/Resources.Designer.cs3// This code was generated by a tool.COMMENT
HIGH…PEASexe/winPEAS/3rdParty/AlphaFS/Resources.Designer.cs3// This code was generated by a tool.COMMENT
Deep Nesting13 hits · 13 pts
SeverityFileLineSnippetContext
LOWlinPEAS/builder/src/linpeasModule.py9CODE
LOWlinPEAS/builder/src/linpeasBuilder.py163CODE
LOWlinPEAS/builder/src/linpeasBuilder.py250CODE
LOWlinPEAS/builder/src/linpeasBaseBuilder.py29CODE
LOWlinPEAS/builder/src/linpeasBaseBuilder.py144CODE
LOWlinPEAS/builder/src/linpeasBaseBuilder.py183CODE
LOWparsers/json2pdf.py72CODE
LOWparsers/json2html.py53CODE
LOWparsers/peas2json.py48CODE
LOWparsers/peas2json.py104CODE
LOWbuild_lists/update_windows_version_defs.py158CODE
LOWbuild_lists/update_windows_version_defs.py372CODE
LOWbuild_lists/update_windows_version_defs.py533CODE
Cross-Language Confusion2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHlinPEAS/tests/test_builder.py169 f'source "{base_file}" >/dev/null 2>&1 || true; 'CODE
HIGHlinPEAS/builder/src/linpeasBuilder.py341 os.system(f"cd /tmp; tar -xvzf /tmp/bin_builder 2> /dev/null; rm /tmp/bin_builder; mv {tar_gz} /tmp/bin_builCODE
Unused Imports7 hits · 7 pts
SeverityFileLineSnippetContext
LOWlinPEAS/tests/test_builder.py1CODE
LOWlinPEAS/builder/linpeas_builder.py4CODE
LOWlinPEAS/builder/linpeas_builder.py4CODE
LOWlinPEAS/builder/src/linpeasBuilder.py5CODE
LOWparsers/json2pdf.py5CODE
LOWbuild_lists/update_windows_version_defs.py3CODE
LOWscripts/add_mitre_tags.py7CODE
Slop Phrases3 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMwinPEAS/winPEASexe/winPEAS/Checks/ApplicationsInfo.cs105 Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalationCODE
MEDIUMwinPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs131 Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalationCODE
MEDIUMwinPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs168 Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalationCODE
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUM…esystem/Native Methods/NativeMethods.FileManagement.cs156 /// The default marshaling for bool is four bytes (to allow seamless integration with BOOL return values).COMMENT
MEDIUM…esystem/Native Methods/NativeMethods.FileManagement.cs175 /// The default marshaling for bool is four bytes (to allow seamless integration with BOOL return values).COMMENT
Modern AI Meta-Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUM…lder/linpeas_parts/functions/enumerateDockerSockets.sh5# Description: Search interesting container runtime, orchestration, and build sockets that could expose high-impact APIsCOMMENT
AI Structural Patterns1 hit · 1 pts
SeverityFileLineSnippetContext
LOWlinPEAS/builder/src/fileRecord.py4CODE