the complete Linux enumeration guide (every technique)
In this video I run through every single enumeration technique I've covered so far — all in one place, all live on a real Kali Linux machine.
Vevery Linux enumeration command in one video
We go deep on Linux privilege escalation enumeration: checking who you are with the id command, reading /etc/passwd and /etc/shadow to extract user accounts and password hashes, abusing sudo permissions, hunting bash history for credentials, enumerating hostname and OS version with uname -a, identifying kernel vulnerabilities by matching kernel version to known exploits, checking system architecture to compile the right payload, listing running processes with ps aux to find root-owned services and leaked credentials, diving into /proc for per-process command lines and environment variables, scanning open ports and network interfaces with netstat and ip a, finding SUID binaries and world-writable files owned by root, searching the file system with find and grep for hardcoded passwords, listing installed software versions with dpkg -l to spot outdated packages, and hunting cron jobs scheduled by root for possible hijacking.
This is your complete Linux enumeration cheat sheet for ethical hacking and penetration testing. Every command is demonstrated live — no slides, no theory only. If you're studying for OSCP, eJPT, or just learning ethical hacking from scratch, bookmark this one.
Get the Code
Join my Discord → / discord
Links:
• Linux Manual Enumaration for PrivEsc
• Gathering information about Network
• Advanced Linux Privileges Escalation Course
• Advanced Windows Privileges Escalation COURSE
Chapters:
0:00 Intro — full Linux enumeration cheat sheet
0:44 id command — who are you & what groups do you belong to?
2:19 Understanding UIDs, GIDs, and privilege groups (sudo, shadow, adm)
4:25 sudo -l — list commands you can run as root
6:00 Reading logs with grep — hunting for credentials in /var/log
7:40 /etc/passwd — enumerating all users and password hashes
10:00 Hostname enumeration — what machine are you on?
11:30 OS version & distro — /etc/os-release and uname
17:00 Linux architecture types — x86_64, ARM, 32-bit vs 64-bit
20:40 Kernel version — matching to exploits on exploit-db
25:00 How distros patch the same kernel independently
29:00 Running processes — ps aux, root-owned services & leaked credentials
33:00 /proc filesystem — per-process cmdline and environment variables
36:00 Network enumeration — netstat -anb, ip a, ip link, ip route
40:00 Cron jobs — hunting root-scheduled tasks for hijacking
44:00 File integrity — SUID binaries, world-writable files owned by root
45:30 grep for hardcoded passwords in /etc directory
46:20 Installed software — dpkg -l to find outdated packages & exploits
48:00 Wrap-up — next video: automated Linux enumeration
Tags:
,linux cheat sheet,oscp preparation,ejpt study,linux for beginners,hacking tutorial 2026,linux bash history,password hash linux,linux user enumeration,linux network enumeration,linux file permissions,world writable files,linux exploit,linux root,linux security,cybersecurity tutorial,hacking for beginners,linux commands,ethical hacking tutorial,linux shell,linux os enumeration