LinPEAS Download: Get It & Verify It

Quick answer

Download LinPEAS only from the official PEASS-ng releases on GitHub: github.com/peass-ng/PEASS-ng/releases/latest. Choose linpeas.sh for normal use, linpeas_small.sh for a smaller/quieter run, or linpeas_fat.sh for fully-offline use. Verify integrity using the SHA-256 hashes GitHub shows for each release asset.

Use the official source

Only download from the official repository. Copies hosted elsewhere may be outdated or tampered with. The canonical source is github.com/peass-ng/PEASS-ng (the older carlospolop/privilege-escalation-awesome-scripts-suite URL redirects there).

Official download links#

Resource	URL
Latest release page	https://github.com/peass-ng/PEASS-ng/releases/latest
Direct linpeas.sh	…/releases/latest/download/linpeas.sh
Repository	github.com/peass-ng/PEASS-ng

Download the latest linpeas.sh

curl -L https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh -o linpeas.sh
# or
wget https://github.com/peass-ng/PEASS-ng/releases/latest/download/linpeas.sh -O linpeas.sh

Which build should you download?#

Build	Best for	Notes
`linpeas.sh`	Most users	All checks; only linux-exploit-suggester embedded. The default.
`linpeas_small.sh`	Speed / stealth / tiny transfer	Only the most important checks. Much smaller.
`linpeas_fat.sh`	Fully offline	Embeds additional third-party tools as base64. Largest.
`linpeas_linux_` / `linpeas_darwin_`	No shell script wanted	Compiled binaries per architecture.

Note

Interesting detail: linpeas.sh and linpeas_fat.sh can have the same size but different SHA-256 hashes, because they embed different third-party payloads. Match the hash to the specific asset.

Verify what you downloaded#

Each release asset on GitHub has a published SHA-256 digest (shown in the release UI and API). Compute the hash of your download and compare it to the value for that exact release and asset.

Compute the SHA-256 of your download

sha256sum linpeas.sh        # Linux
shasum -a 256 linpeas.sh    # macOS

Why we don't hard-code a hash

We deliberately do not publish a hash value here. Release tags change often (often several per day, tagged YYYYMMDD-<commit>), so a hard-coded hash would quickly be wrong. Always compare against the hash shown for the specific release you downloaded.

Build your own LinPEAS#

PEASS-ng includes a builder so you can produce a script with only the checks you want — smaller and quieter. From the linPEAS folder of a repository checkout:

Build a custom LinPEAS with only container and cloud checks

python3 -m builder.linpeas_builder --include "container,cloud" --output /tmp/linpeas_custom.sh

Use --all-no-fat to reproduce the standard linpeas.sh, --small for the small build, or --include/--exclude with comma-separated module keywords.

Note

Verified against PEASS-ng release 20260908-dffb9496.

Sources & references

PEASS-ng releases — reviewed 20260908-dffb9496
linPEAS README — download and usage commands
Kali peass-ng package — package name and paths