A community-first, security-hardened fork of the popular LinEnum Linux enumeration script. This enhanced version addresses critical security vulnerabilities while maintaining full functionality and adding community-driven improvements.
This fork was created to address critical security vulnerabilities in the original LinEnum while building a welcoming, inclusive community around Linux security tooling. We believe security tools should be:
- Secure by design - No tool should introduce vulnerabilities
- Community-driven - Everyone can contribute and learn
- Well-documented - Clear docs help everyone
- Ethically focused - For defensive security only
- Command injection prevention - Input validation for all user parameters
- Secure password handling - No passwords visible in process lists
- Path traversal protection - All file operations properly quoted
- Safe variable handling - Prevents exploitation via special characters
- Modular architecture for easier contributions
- JSON/XML output formats
- Performance optimizations
- Plugin system for custom checks
- Automated testing suite
- Multi-language support
# Basic enumeration
./LinEnum.sh
# Thorough scan with report
./LinEnum.sh -t -r report_name
# Search for keywords (safely!)
./LinEnum.sh -k keyword -e /tmp/export/
# All options
./LinEnum.sh -s -k keyword -r report -e /tmp/ -t-kKeyword search (alphanumeric, dots, underscores, hyphens only)-eExport location-tThorough tests (slow but comprehensive)-sSudo password check (CTF use only - still insecure!)-rReport name-hHelp
We're building an inclusive community around Linux security tooling. Whether you're a:
- Student learning security
- Researcher finding vulnerabilities
- Developer improving code
- Writer enhancing documentation
- Translator localizing content
You belong here! Check our Contributing Guide to get started.
This tool is for defensive security purposes only:
- ✅ Authorized penetration testing
- ✅ CTF competitions
- ✅ Personal system auditing
- ✅ Security education
Found a vulnerability? Please see our Security Policy for responsible disclosure.
| Feature | Original | Enhanced |
|---|---|---|
| Command Injection | ❌ Vulnerable | ✅ Protected |
| Password Handling | ❌ Process visible | ✅ Secure stdin |
| Path Variables | ❌ Unquoted | ✅ Properly quoted |
| Input Validation | ❌ None | ✅ Strict validation |
| Community Focus | ➖ Limited | ✅ First priority |
-
Clone the repository
git clone https://github.com/Karlblock/LinEnum-Enhanced.git cd LinEnum-Enhanced chmod +x LinEnum.sh -
Run basic enumeration
./LinEnum.sh
-
Join the community
- Star the repository
- Check open issues
- Read contribution guidelines
- Make your first PR!
See our public roadmap for planned features and improvements.
- Complete security audit
- Automated testing
- Performance optimizations
- Better documentation
- Modular architecture
- Plugin system
- GUI interface option
- API for integration
We appreciate all contributions! See our Contributors List.
This project maintains the GPL v3 license from the original LinEnum. See LICENSE for details.
- Original LinEnum by @rebootuser
- Security improvements inspired by community feedback
- All our amazing contributors
Made with ❤️ by the security community, for the security community
# LinEnum-Enhanced # LinEnum-Enhanced