diff --git a/05c-Linux.md b/05c-Linux.md
new file mode 100644
index 0000000..440f849
--- /dev/null
+++ b/05c-Linux.md
@@ -0,0 +1,32 @@
+# 05c-Linux
+## 01-RAW-find-installation-and-version
+
+![linux-version](https://git.neumannsland.de/casualscripter/Masterthesis/raw/branch/master/home/lucifer/Pictures/Screenshots/linux-version.png)
+
+## 02a-E01-RPi-CPU-version
+
+![rpi-cpu-version](https://git.neumannsland.de/casualscripter/Masterthesis/raw/branch/master/home/lucifer/Pictures/Screenshots/rpi-cpu-version.png)
+
+## 02b-E01-RPi-kernel-version
+
+![rpi-kernel-version](https://git.neumannsland.de/casualscripter/Masterthesis/raw/branch/master/home/lucifer/Pictures/Screenshots/rpi-kernel-version.png)
+
+## 03-E01-timezone
+
+![linux-timezone](https://git.neumannsland.de/casualscripter/Masterthesis/raw/branch/master/home/lucifer/Pictures/Screenshots/linux-timezone.png)
+
+## 04-ROOT-passwd
+
+Just right click, fire up and follow the the [offical instructions](hhttps://pogostick.net/~pnh/ntpasswd/README.txt)!
+
+## 05-E01-dump-sha512crypt
+
+![linux-dump-hashes](https://git.neumannsland.de/casualscripter/Masterthesis/raw/branch/master/home/lucifer/Pictures/Screenshots/linux-dump-hashes.png)
+
+## 06-fwh-sha512crypt-hashcat-dict
+
+Should be nearly the same as 07 for Windows and/or 06 for macOS. As 06c for macOS it could also need years to crack!?
+
+## 07-E01-ip-addresses
+
+See #3 !