Repository Analysis

peass-ng/PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

7.8 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of peass-ng/PEASS-ng, a C# project with 20,390 GitHub stars. SynthScan v2.0 examined 296,781 lines of code across 1518 source files, recording 2264 pattern matches distributed across 15 syntactic categories. The overall adjusted score of 7.8 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

7.8
Adjusted Score
7.8
Raw Score
100%
Time Factor
2026-08-24
Last Push
20.4K
Stars
C#
Language
296.8K
Lines of Code
1.5K
Files
2.3K
Pattern Hits
2026-08-29
Scan Date
0.01
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 6HIGH 15MEDIUM 30LOW 2213

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 2264 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Over-Commented Block2078 hits · 1885 pts
SeverityFileLineSnippetContext
LOWlinPEAS/builder/README.md41## How to add new modulesCOMMENT
LOW…der/linpeas_parts/2_container/2_List_mounted_tokens.sh1# Title: Container - List mounted tokensCOMMENT
LOW…r/linpeas_parts/2_container/7_RW_bind_mounts_nosuid.sh1# Title: Container - Writable bind mounts without nosuid (SUID risk)COMMENT
LOW…inpeas_parts/2_container/4_Docker_container_details.sh1# Title: Container - Docker Container detailsCOMMENT
LOW…ilder/linpeas_parts/2_container/3_Container_details.sh1# Title: Container - Container detailsCOMMENT
LOW…builder/linpeas_parts/2_container/1_Container_tools.sh1# Title: Container - Container ToolsCOMMENT
LOW…builder/linpeas_parts/2_container/1_Container_tools.sh21# - Privileged tool exploitationCOMMENT
LOW…lder/linpeas_parts/2_container/5_Container_breakout.sh1# Title: Container - Container & breakout enumerationCOMMENT
LOW…npeas_parts/7_software_information/Browser_profiles.sh1# Title: Software Information - Browser ProfilesCOMMENT
LOW…ilder/linpeas_parts/7_software_information/Logstash.sh1# Title: Software Information - LogstashCOMMENT
LOW…S/builder/linpeas_parts/7_software_information/Pamd.sh1# Title: Software Information - Pam.dCOMMENT
LOW…r/linpeas_parts/7_software_information/Apache_nginx.sh1# Title: Software Information - Apache-NginxCOMMENT
LOW…ilder/linpeas_parts/7_software_information/Kerberos.sh1# Title: Software Information - KerberosCOMMENT
LOW…r/linpeas_parts/7_software_information/PHP_Sessions.sh1# Title: Software Information - PHP SessionsCOMMENT
LOW…peas_parts/7_software_information/1_Useful_software.sh1# Title: Software Information - Useful SoftwareCOMMENT
LOW…er/linpeas_parts/7_software_information/2_Compilers.sh1# Title: Software Information - CompilersCOMMENT
LOW…npeas_parts/7_software_information/Cached_AD_hashes.sh1# Title: Software Information - Cached AD HashesCOMMENT
LOW…lder/linpeas_parts/7_software_information/Vault_ssh.sh1# Title: Software Information - Vault-sshCOMMENT
LOW…der/linpeas_parts/7_software_information/Kcpassword.sh1# Title: Software Information - kcpasswordCOMMENT
LOW…AS/builder/linpeas_parts/7_software_information/Ssh.sh1# Title: Software Information - ssh filesCOMMENT
LOW…builder/linpeas_parts/7_software_information/Splunk.sh1# Title: Software Information - SplunkCOMMENT
LOW…lder/linpeas_parts/7_software_information/Log4shell.sh1# Title: Software Information - Searching Log4Shell vulnerable librariesCOMMENT
LOW…/builder/linpeas_parts/7_software_information/Mysql.sh1# Title: Software Information - MysqlCOMMENT
LOW…uilder/linpeas_parts/7_software_information/FreeIPA.sh1# Title: Software Information - FreeIPACOMMENT
LOW…ilder/linpeas_parts/7_software_information/Awsvault.sh1# Title: Software Information - Check aws-vaultCOMMENT
LOW…der/linpeas_parts/7_software_information/Postgresql.sh1# Title: Software Information - PostgreSQLCOMMENT
LOW…arts/7_software_information/PackageKit_Pack2TheRoot.sh1# Title: Software Information - PackageKit Pack2TheRoot (CVE-2026-41651)COMMENT
LOW…linpeas_parts/7_software_information/Extra_software.sh1# Title: Software Information - Extra sotftareCOMMENT
LOW…der/linpeas_parts/7_software_information/Containerd.sh1# Title: Software Information - containerd installedCOMMENT
LOW…inpeas_parts/7_software_information/Screen_sessions.sh1# Title: Software Information - Screen sessionsCOMMENT
LOW…uilder/linpeas_parts/7_software_information/YubiKey.sh1# Title: Software Information - YubiKey athenticationCOMMENT
LOW…S/builder/linpeas_parts/7_software_information/Tmux.sh1# Title: Software Information - TmuxCOMMENT
LOW…S/builder/linpeas_parts/7_software_information/Runc.sh1# Title: Software Information - RuncCOMMENT
LOW…builder/linpeas_parts/7_software_information/Gitlab.sh1# Title: Software Information - GitlabCOMMENT
LOW…uilder/linpeas_parts/7_software_information/PGP_GPG.sh1# Title: Software Information - PGP-GPGCOMMENT
LOW…uilder/linpeas_parts/7_software_information/Dovecot.sh1# Title: Software Information - DovecotCOMMENT
LOW…builder/linpeas_parts/7_software_information/Docker.sh1# Title: Software Information - DockerCOMMENT
LOW…S/builder/linpeas_parts/7_software_information/SKey.sh1# Title: Software Information - S/Key athenticationCOMMENT
LOW…ts/7_software_information/Postgresql_Event_Triggers.sh1# Title: Software Information - PostgreSQL Event TriggersCOMMENT
LOW…oftware_information/3_Macos_writable_installed_apps.sh1# Title: Software Information - MacOS writable Installed ApplicationsCOMMENT
LOW…cs_crons_timers_srvcs_sockets/17_Deleted_open_files.sh1# Title: Processes & Cron & Services & Timers - Deleted open filesCOMMENT
LOW…_crons_timers_srvcs_sockets/16_Crontab_UI_misconfig.sh1# Title: Processes & Cron & Services & Timers - Crontab UI (root) MisconfigurationCOMMENT
LOW…4_procs_crons_timers_srvcs_sockets/1_List_processes.sh1# Title: Processes & Cron & Services & Timers - List processesCOMMENT
LOW…procs_crons_timers_srvcs_sockets/15_Rcommands_trust.sh1# Title: Processes & Cron & Services & Timers - Legacy r-commands and host-based trustCOMMENT
LOW…4_procs_crons_timers_srvcs_sockets/14_DBus_analysis.sh1# Title: Processes & Cron & Services & Timers - D-Bus AnalysisCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh1# Title: Processes & Cron & Services & Timers - Socket Files AnalysisCOMMENT
LOW…rons_timers_srvcs_sockets/13_Unix_sockets_listening.sh1# Title: Processes & Cron & Services & Timers - Unix Sockets AnalysisCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/10_Services.sh1# Title: Processes & Cron & Services & Timers - Services and Service FilesCOMMENT
LOW…imers_srvcs_sockets/5_Files_open_process_other_user.sh1# Title: Processes & Cron & Services & Timers - Files opened by processes belonging to other usersCOMMENT
LOW…_timers_srvcs_sockets/8_Macos_launch_agents_daemons.sh1# Title: Processes & Cron & Services & Timers - Third party LaunchAgents & LaunchDemonsCOMMENT
LOW…s_crons_timers_srvcs_sockets/6_Different_procs_1min.sh1# Title: Processes & Cron & Services & Timers - Different processes 1 minCOMMENT
LOW…parts/4_procs_crons_timers_srvcs_sockets/11_Systemd.sh1# Title: System Information - SystemdCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh1# Title: Processes & Cron & Services & Timers - System TimersCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh1# Title: Processes & Cron & Services & Timers - Cron jobs and WildcardsCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh161COMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh181COMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh201 COMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh241 # [ -z "$job_id" ] && continueCOMMENT
LOW…crons_timers_srvcs_sockets/2_Process_cred_in_memory.sh1# Title: Processes & Cron & Services & Timers - Processes with credentials inside memoryCOMMENT
LOW…crons_timers_srvcs_sockets/3_Process_binaries_perms.sh1# Title: Processes & Cron & Services & Timers - Process binaries permissionsCOMMENT
2018 more matches not shown…
Hallucination Indicators6 hits · 90 pts
SeverityFileLineSnippetContext
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs624 /// <c>System.Web.Mvc.Html.ChildActionExtensions.RenderAction(HtmlHelper, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs642 /// <c>System.Web.Mvc.Html.ChildActionExtensions.RenderAction(HtmlHelper, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs661 /// <c>System.Web.Mvc.Html.ChildActionExtensions.RenderAction(HtmlHelper, String, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs694 /// <c>System.Web.Mvc.Html.RenderPartialExtensions.RenderPartial(HtmlHelper, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs708 /// <c>System.Web.Mvc.Html.DisplayExtensions.DisplayForModel(HtmlHelper, String)</c>.COMMENT
CRITICAL…PEASexe/winPEAS/TaskScheduler/JetBrains.Annotations.cs716 /// <c>System.Web.Mvc.Html.EditorExtensions.EditorForModel(HtmlHelper, String)</c>.COMMENT
Redundant / Tautological Comments49 hits · 73 pts
SeverityFileLineSnippetContext
LOW…/builder/linpeas_parts/7_software_information/Mysql.sh135 # Check if MySQL is running as root and if the version is either 4.x or 5.xCOMMENT
LOW…4_procs_crons_timers_srvcs_sockets/1_List_processes.sh182 # Check if we can access the FD but not the target fileCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh39 # Check if socket file is writable (following symlinks)COMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh59 # Check if executable is writable (following symlinks)COMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh89 # Check if listener path is writable (following symlinks)COMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/10_Services.sh25 # Check if service runs with elevated privilegesCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/10_Services.sh76 # Check if service file is writable (following symlinks)COMMENT
LOW…_timers_srvcs_sockets/8_Macos_launch_agents_daemons.sh80 # Check if plist is writableCOMMENT
LOW…_timers_srvcs_sockets/8_Macos_launch_agents_daemons.sh92 # Check if program is writableCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh28 # Check if the service runs with elevated privilegesCOMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh71 # Check if timer file is writable (following symlinks)COMMENT
LOW…/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh120 # Check if timer file is writableCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh51 # Check if it's a regular fileCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh54 # Check if it's writable and executableCOMMENT
LOW…arts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh162 # # Check if the file is writableCOMMENT
LOW…crons_timers_srvcs_sockets/3_Process_binaries_perms.sh31 # Check if binary is writableCOMMENT
LOW…imers_srvcs_sockets/4_Processes_PPID_different_user.sh55 # Check if users are different and PPID user is not rootCOMMENT
LOW…der/linpeas_parts/linpeas_base/1_check_network_jobs.sh89 #Check if IP and Netmask are correct and the use nc to find hosts. By default check ports: 22 80 443 445 3389COMMENT
LOW…der/linpeas_parts/linpeas_base/1_check_network_jobs.sh158 #Check if IP and Netmask are correct and the use fping or ping to find hostsCOMMENT
LOW…der/linpeas_parts/linpeas_base/1_check_network_jobs.sh249 #Check if LOCAL_PORT is a numberCOMMENT
LOW…der/linpeas_parts/linpeas_base/1_check_network_jobs.sh254 #Check if REMOTE_PORT is a numberCOMMENT
LOW…lder/linpeas_parts/8_interesting_perms_files/1_SUID.sh67 if [ ${#sline_first} -gt 2 ] && command -v "$sline_first" 2>/dev/null | grep -q '/' && echo "$sline_fiCODE
LOW…lder/linpeas_parts/8_interesting_perms_files/2_SGID.sh61 if [ ${#sline_first} -gt 2 ] && command -v "$sline_first" 2>/dev/null | grep -q '/'; then #Check if exCODE
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh31 # Check if inetd is installedCOMMENT
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh37 # Check if inetd is runningCOMMENT
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh71 # Check if xinetd is installedCOMMENT
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh77 # Check if xinetd is runningCOMMENT
LOW…der/linpeas_parts/5_network_information/9_Inetdconf.sh106 # Check if service is enabledCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh31 # Check if iptables is availableCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh37 # Check if we have permission to list rulesCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh74 # Check if nft is availableCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh80 # Check if we have permission to list rulesCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh110 # Check if firewall-cmd is availableCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh116 # Check if firewalld is runningCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh150 # Check if ufw is availableCOMMENT
LOW…lder/linpeas_parts/5_network_information/8_Iptables.sh156 # Check if UFW is runningCOMMENT
LOWlinPEAS/builder/src/linpeasModule.py177 # Check if the indicated dependencies are actually being usedCOMMENT
LOWlinPEAS/builder/src/linpeasModule.py199 # Check if all variables are correctly definedCOMMENT
LOWlinPEAS/builder/src/linpeasModule.py231 # Check if other object is an instance of LinpeasModuleCOMMENT
LOWlinPEAS/builder/src/linpeasModule.py252 # Check if item is already a LinpeasModule object.COMMENT
LOWlinPEAS/builder/src/linpeasBaseBuilder.py156 sorted_funcs.index(d_func) # Check if it's thereCODE
LOWlinPEAS/builder/src/linpeasBaseBuilder.py195 sorted_vars.index(d_var) # Check if it's thereCODE
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs8 # Check if appcmd.exe existsCOMMENT
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs34 # Check if credentials existsCOMMENT
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs55 # Check if credentials existsCOMMENT
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs62 # Check if any passwords were foundCOMMENT
LOW…/winPEASexe/winPEAS/Info/WindowsCreds/AppCmd/AppCmd.cs64 # Display results in list view that can feed into the pipelineCOMMENT
LOWbuild_lists/sensitive_files.yaml123 check_extra_path: "" #Check if the found files are in a specific path (only linpeas)CODE
LOW.github/workflows/artifacts_cleanup.yml14 expire-in: 1days # Set this to 0 to delete all artifactsCODE
Hyper-Verbose Identifiers55 hits · 67 pts
SeverityFileLineSnippetContext
LOWlinPEAS/tests/test_cifswitch.py77 def test_complete_vulnerable_chain_is_reported_without_executing_helper(self):CODE
LOWlinPEAS/tests/test_cifswitch.py87 def test_backported_patch_marker_suppresses_finding(self):CODE
LOWlinPEAS/tests/test_cifswitch.py95 def test_fixed_upstream_stable_version_suppresses_finding(self):CODE
LOWlinPEAS/tests/test_cifswitch.py103 def test_upstream_fixed_version_boundaries(self):CODE
LOWlinPEAS/tests/test_cifswitch.py144 def test_inactive_upcall_rule_suppresses_finding(self):CODE
LOWlinPEAS/tests/test_cifswitch.py152 def test_unloaded_cifs_module_suppresses_finding(self):CODE
LOWlinPEAS/tests/test_snap_confine.py98 def test_vulnerable_ubuntu_package_is_reported_without_executing_binary(self):CODE
LOWlinPEAS/tests/test_snap_confine.py108 def test_release_specific_fixed_versions(self):CODE
LOWlinPEAS/tests/test_snap_confine.py143 def test_fixed_ubuntu_package_is_not_flagged(self):CODE
LOWlinPEAS/tests/test_snap_confine.py152 def test_vulnerable_snap_revision_is_reported(self):CODE
LOWlinPEAS/tests/test_snap_confine.py161 def test_setuid_snap_confine_is_excluded(self):CODE
LOWlinPEAS/tests/test_doas.py40 def test_version_parsing_and_comparison(self):CODE
LOWlinPEAS/tests/test_doas.py57 def test_soccer_rule_matches_current_user_and_dstat(self):CODE
LOWlinPEAS/tests/test_doas.py83 def test_group_rule_and_setenv_options_are_parsed(self):CODE
LOWlinPEAS/tests/test_doas.py103 def test_rule_reader_ignores_comments_but_preserves_quoted_hashes(self):CODE
LOWlinPEAS/tests/test_doas.py124 def test_doas_c_evaluation_never_runs_the_requested_command(self):CODE
LOWlinPEAS/tests/test_doas.py161 def test_module_reports_the_soccer_configuration(self):CODE
LOWlinPEAS/tests/test_doas.py210 def test_symlinked_binary_uses_target_permissions(self):CODE
LOWlinPEAS/tests/test_doas.py252 def test_module_replaces_invalid_doas_l_with_config_evaluation(self):CODE
LOWlinPEAS/tests/test_needrestart.py104 def test_vulnerable_ubuntu_package_with_default_scanner_is_reported(self):CODE
LOWlinPEAS/tests/test_needrestart.py114 def test_vendor_fixed_ubuntu_package_is_not_flagged(self):CODE
LOWlinPEAS/tests/test_needrestart.py123 def test_vendor_fixed_debian_backport_is_not_flagged(self):CODE
LOWlinPEAS/tests/test_needrestart.py135 def test_removed_package_with_remaining_config_is_ignored(self):CODE
LOWlinPEAS/tests/test_needrestart.py148 def test_conf_d_mitigation_overrides_main_configuration(self):CODE
LOWlinPEAS/tests/test_needrestart.py158 def test_upstream_version_comparison_handles_double_digit_components(self):CODE
LOWlinPEAS/tests/test_builder.py24 def test_small_build_creates_executable(self):CODE
LOWlinPEAS/tests/test_builder.py32 def test_include_exclude_modules(self):CODE
LOWlinPEAS/tests/test_builder.py40 def test_exclude_matches_module_ids_case_insensitively(self):CODE
LOWlinPEAS/tests/test_builder.py57 def test_copyfail_python_probe_removes_temp_script(self):CODE
LOWlinPEAS/tests/test_builder.py100 def test_threads_flag_present_in_getopts(self):CODE
LOWlinPEAS/tests/test_builder.py119 def test_threads_flag_present_in_help_text(self):CODE
LOWlinPEAS/tests/test_builder.py128 def test_mitre_flag_present_in_getopts(self):CODE
LOWlinPEAS/tests/test_builder.py144 def test_mitre_flag_present_in_help_text(self):CODE
LOWlinPEAS/tests/test_builder.py153 def test_mitre_filter_function_present(self):CODE
LOWlinPEAS/tests/test_builder.py182 def test_mitre_parent_filter_matches_subtechnique(self):CODE
LOWlinPEAS/tests/test_builder.py188 def test_mitre_subtechnique_filter_does_not_match_parent(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py31 def test_check_module_id_matches_filename(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py48 def test_module_ids_are_unique(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py56 def test_module_shell_snippets_are_syntactically_valid(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py68 def test_declared_function_dependencies_exist(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py83 def test_declared_global_variable_dependencies_exist(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py104 def test_sudo_l_check_is_bounded_for_non_interactive_runs(self):CODE
LOWlinPEAS/tests/test_modules_metadata.py112 def test_yaml_globals_uses_committed_regexes_without_downloading(self):CODE
LOWlinPEAS/builder/src/linpeasBuilder.py395 def __generate_regexes_search(self) -> str:CODE
LOWwinPEAS/winPEASexe/winPEAS/TaskScheduler/TaskService.cs1025 private static class ConnectionDataManagerCODE
LOWparsers/tests/test_json2html.py49 def test_escapes_html_in_line_text(self):CODE
LOWparsers/tests/test_json2html.py56 def test_escapes_html_in_infos(self):CODE
LOWparsers/tests/test_json2html.py61 def test_escapes_section_names(self):CODE
LOWparsers/tests/test_json2html.py69 def test_colored_replacement_is_escaped_and_kept(self):CODE
LOWparsers/tests/test_json2html.py74 def test_ids_are_deterministic_and_unique(self):CODE
LOWbuild_lists/update_windows_version_defs.py344def fetch_msrc_update_catalog(*, timeout: int, retries: int) -> list[dict[str, Any]]:CODE
LOWbuild_lists/update_windows_version_defs.py359def product_map_from_document(document: dict[str, Any]) -> dict[str, str]:CODE
LOWbuild_lists/update_windows_version_defs.py372def extract_msrc_entries_from_document(document: dict[str, Any]) -> list[RawEntry]:CODE
LOWbuild_lists/update_windows_version_defs.py455def extract_exploit_ids_from_feed(payload: bytes, *, year: int) -> set[str]:CODE
LOWmetasploit/peass.rb337function DecryptStringFromBytesAes([String] $key, [String] $iv, [String] $encrypted) {CODE
Cross-Language Confusion13 hits · 61 pts
SeverityFileLineSnippetContext
HIGHlinPEAS/tests/test_cifswitch.py125 f"echo {version}=yes || echo {version}=no"CODE
HIGHlinPEAS/tests/test_snap_confine.py125 f"echo {version}=yes || echo {version}=no"CODE
HIGHlinPEAS/tests/test_doas.py44doas_version_lt 6.8 6.8.1 && echo lt=yesSTRING
HIGHlinPEAS/tests/test_doas.py45doas_version_ge 6.8.1 6.8.1 && echo ge=yesSTRING
HIGHlinPEAS/tests/test_doas.py46doas_version_le 6.8.2 6.8.2 && echo le=yesSTRING
HIGHlinPEAS/tests/test_doas.py47! doas_version_lt 6.9 6.8.1 && echo newer=yesSTRING
HIGHlinPEAS/tests/test_doas.py71doas_rule_has_option "$rule" nopass && echo nopass=yesSTRING
HIGHlinPEAS/tests/test_doas.py93doas_rule_has_option "$rule" setenv && echo setenv=yesSTRING
HIGHlinPEAS/tests/test_needrestart.py162 "nr48990_version_lt 3.7 3.8 && echo old=yes",CODE
HIGHlinPEAS/tests/test_needrestart.py163 "nr48990_version_lt 3.10 3.8 || echo new=yes",CODE
HIGHlinPEAS/tests/test_builder.py169 f'source "{base_file}" >/dev/null 2>&1 || true; 'CODE
HIGHlinPEAS/builder/src/linpeasBuilder.py341 os.system(f"cd /tmp; tar -xvzf /tmp/bin_builder 2> /dev/null; rm /tmp/bin_builder; mv {tar_gz} /tmp/bin_builCODE
HIGHparsers/tests/test_json2html.py21 "clean_text": "[-] /usr/bin/echo && chmod 2>/dev/null",CODE
Decorative Section Separators16 hits · 48 pts
SeverityFileLineSnippetContext
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs10 // ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs12 // ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs33 // ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs35 // ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs55 // ─── Helpers ───────────────────────────────────────────────COMMENT
MEDIUM…ASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs159 // ─── Main entry ───────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py13 # ─── Section 1: System Information ────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py29 # ─── Section 2: Container ─────────────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py36 # ─── Section 3: Cloud ─────────────────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py51 # ─── Section 4: Processes / Crons / Timers / Services / Sockets ───────────COMMENT
MEDIUMscripts/add_mitre_tags.py69 # ─── Section 5: Network Information ───────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py81 # ─── Section 6: Users Information ─────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py100 # ─── Section 7: Software Information ──────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py132 # ─── Section 8: Interesting Permissions / Files ────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py150 # ─── Section 9: Interesting Files ─────────────────────────────────────────COMMENT
MEDIUMscripts/add_mitre_tags.py180 # ─── Section 10: API Keys Regex ───────────────────────────────────────────COMMENT
Excessive Try-Catch Wrapping15 hits · 22 pts
SeverityFileLineSnippetContext
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh54except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh64except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh81except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh115 except Exception as e:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh154 except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh208except Exception as e:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh213 except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh220 except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh227 except Exception:CODE
LOW…nPEAS/builder/linpeas_parts/functions/checkCopyFail.sh233 except Exception:CODE
MEDIUMparsers/json2pdf.py159 print("Error: Please pass the peas.json file and the path to save the pdf\njson2pdf.py <json_file> <pdf_file.pdfCODE
MEDIUMparsers/json2html.py367 print("Error: Please pass the peas.json file and the path to save the html\njson2html.py <json_file.json> <HTML_CODE
MEDIUMparsers/peas2json.py184 print("Error: Please pass the peas.out file and the path to save the json\npeas2json.py <output_file> <json_fileCODE
MEDIUMbuild_lists/download_regexes.py21 print("Error: Unable to download the regexes file.")CODE
LOW.github/workflows/chack-agent-pr-triage.yml285 except Exception:CODE
Self-Referential Comments4 hits · 16 pts
SeverityFileLineSnippetContext
MEDIUM.github/workflows/CI-master_tests.yml487 # Create the releaseCOMMENT
MEDIUMmetasploit/peass.rb353 # Create a RijndaelManaged objectCOMMENT
MEDIUMmetasploit/peass.rb362 # Create an encryptor to perform the stream transform.COMMENT
MEDIUMmetasploit/peass.rb365 # Create the streams used for encryption.COMMENT
Synthetic Comment Markers2 hits · 15 pts
SeverityFileLineSnippetContext
HIGH…AS/winPEASexe/winPEAS/Properties/Resources.Designer.cs3// This code was generated by a tool.COMMENT
HIGH…PEASexe/winPEAS/3rdParty/AlphaFS/Resources.Designer.cs3// This code was generated by a tool.COMMENT
Deep Nesting12 hits · 12 pts
SeverityFileLineSnippetContext
LOWlinPEAS/builder/src/linpeasModule.py9CODE
LOWlinPEAS/builder/src/linpeasBuilder.py163CODE
LOWlinPEAS/builder/src/linpeasBuilder.py250CODE
LOWlinPEAS/builder/src/linpeasBaseBuilder.py29CODE
LOWlinPEAS/builder/src/linpeasBaseBuilder.py144CODE
LOWlinPEAS/builder/src/linpeasBaseBuilder.py183CODE
LOWparsers/json2pdf.py72CODE
LOWparsers/peas2json.py48CODE
LOWparsers/peas2json.py104CODE
LOWbuild_lists/update_windows_version_defs.py158CODE
LOWbuild_lists/update_windows_version_defs.py372CODE
LOWbuild_lists/update_windows_version_defs.py533CODE
Unused Imports7 hits · 7 pts
SeverityFileLineSnippetContext
LOWlinPEAS/tests/test_builder.py1CODE
LOWlinPEAS/builder/linpeas_builder.py4CODE
LOWlinPEAS/builder/linpeas_builder.py4CODE
LOWlinPEAS/builder/src/linpeasBuilder.py5CODE
LOWparsers/json2pdf.py5CODE
LOWbuild_lists/update_windows_version_defs.py3CODE
LOWscripts/add_mitre_tags.py7CODE
Slop Phrases3 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMwinPEAS/winPEASexe/winPEAS/Checks/ApplicationsInfo.cs106 Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalationCODE
MEDIUMwinPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs131 Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalationCODE
MEDIUMwinPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs168 Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalationCODE
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUM…esystem/Native Methods/NativeMethods.FileManagement.cs156 /// The default marshaling for bool is four bytes (to allow seamless integration with BOOL return values).COMMENT
MEDIUM…esystem/Native Methods/NativeMethods.FileManagement.cs175 /// The default marshaling for bool is four bytes (to allow seamless integration with BOOL return values).COMMENT
Modern AI Meta-Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUM…lder/linpeas_parts/functions/enumerateDockerSockets.sh5# Description: Search interesting container runtime, orchestration, and build sockets that could expose high-impact APIsCOMMENT
AI Structural Patterns1 hit · 1 pts
SeverityFileLineSnippetContext
LOWlinPEAS/builder/src/fileRecord.py4CODE