gitea-mirror/PEASS-ng
1
0
Fork 0
mirror of https://github.com/peass-ng/PEASS-ng.git synced 2026-07-28 14:47:18 -07:00
Code Issues Packages Projects Releases Wiki Activity
2,088 Commits 127 Branches 392 Tags
09f5bf7edc98b732f008efd146e8c877db1be5f0
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Carlos Polop 09f5bf7edc Use HackTricks package criticality only 2026-06-30 15:57:25 +02:00
Carlos Polop 8a9a5e2c94 Sort package vulnerabilities by criticality 2026-06-30 15:34:22 +02:00
SirBroccoliGitHubHackTricks PEASS Autoimprover
 		beff9853fe Auto-merge PR #661 (trusted generated PR) 
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz>
 2026-06-30 14:43:41 +02:00
SirBroccoliGitHubHackTricks PEASS Autoimprover
 		b449b0e6cd Auto-merge PR #660 (trusted generated PR) 
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz>
 2026-06-30 14:43:35 +02:00
SirBroccoliGitHubchack-agent
 		d88514f0eb Auto-merge PR #659 (trusted generated PR) 
Co-authored-by: chack-agent <chack-agent@users.noreply.github.com>
 2026-06-30 14:43:29 +02:00
SirBroccoliGitHubchack-agent
 		364a19b727 Auto-merge PR #658 (trusted generated PR) 
Co-authored-by: chack-agent <chack-agent@users.noreply.github.com>
 2026-06-30 14:43:22 +02:00
SirBroccoliGitHubchack-agent
 		70a6d737ae Auto-merge PR #657 (trusted generated PR) 
Co-authored-by: chack-agent <chack-agent@users.noreply.github.com>
 2026-06-30 14:43:16 +02:00
Carlos Polop 93c9b909e6 ci: auto-merge trusted generated PRs 2026-06-30 14:42:50 +02:00
Carlos Polop 24816a4996 Rename package vulnerability subsection 2026-06-29 15:41:21 +02:00
Carlos Polop 28f0a7f2e2 Fix linPEAS hostname variable metadata 2026-06-29 14:46:00 +02:00
Carlos Polop 4618657125 Add winPEAS online package vulnerability lookup 2026-06-29 14:34:27 +02:00
Carlos Polop 2de2b019ec fix 2026-06-29 14:22:53 +02:00
Carlos Polop aef2b84f33 Add opt-in online package vulnerability lookup 2026-06-29 13:50:25 +02:00
SirBroccoliandGitHub 14e006576e Merge pull request #655 from kkreiju/fix/dirty-frag-false-positive 
fix: resolve CVE-2026-43284 and CVE-2026-43500 dirty frag false positive
 2026-06-29 12:52:48 +02:00
SirBroccoliandGitHub 17bcb54677 Merge pull request #656 from kkreiju/fix/cve-2025-38236-registry 
fix: resolve CVE-2025-38236 kernel version constraints
 2026-06-29 12:52:21 +02:00
Carlos Polop 50e07e6474 fix: gate Dirty Frag checks by fixed kernel ranges 2026-06-29 12:51:19 +02:00
Carlos Polop ca84505efc fix: refine CVE-2025-38236 kernel ranges 2026-06-29 12:46:51 +02:00
Carlos PolopandClaude Opus 4.8 f4c29dbb03 ci: build, wait and merge windows definition PRs inline (no workflow_run/PAT-dispatch) 
CODEX_FIXER_TOKEN is a fine-grained PAT with Contents/Pull-requests write but NOT
Actions:write, so it cannot create a workflow_dispatch event; and a github.token
-dispatched run never emits a workflow_run event to drive the triage merge job. So
neither half of the old cross-workflow design could work.

Instead, update_windows_version_definitions.yml now dispatches PR-tests with
github.token (this workflow already has actions:write), polls that run directly,
and on success squash-merges the PR with the CODEX_FIXER_TOKEN PAT so the push to
master triggers CI-master_test -> Publish_release. Remove the now-dead
auto_merge_windows_definition_bot_pr job from chack-agent-pr-triage.yml and the
temporary token probe. Bump the job timeout to 90m to cover the inline wait.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-28 20:33:50 +02:00
Carlos PolopandClaude Opus 4.8 e193030157 ci: probe CODEX_FIXER_TOKEN contents/PR write (temporary) 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-28 20:31:00 +02:00
Carlos PolopandClaude Opus 4.8 5ca6d6b797 ci: use CODEX_FIXER_TOKEN for bot PR auto-merge (secret CHACK_AGENT_FIXER_TOKEN never existed) 
The workflows referenced a secret (CHACK_AGENT_FIXER_TOKEN) that does not exist
in the repo, so it resolved to empty and the windows-definitions auto-merge could
neither dispatch PR-tests nor merge. Point every reference at the existing
CODEX_FIXER_TOKEN PAT (fine-grained, admin on the repo) instead. Remove the
temporary token probe.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-28 20:24:19 +02:00
Carlos PolopandClaude Opus 4.8 dd11345f50 ci: temporary token probe (to be removed) 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-28 20:21:46 +02:00
Carlos PolopandClaude Opus 4.8 0a1b242fcf ci: actually auto-merge windows definition bot PRs 
Dispatch PR-tests with a PAT instead of github.token: a workflow run owned
by GITHUB_TOKEN does not emit a downstream `workflow_run` event, so the
chack-agent-pr-triage auto-merge job never fired for the bot PR. Also accept
the UNSTABLE merge state (the bot PR's `action_required` pull_request run
keeps it permanently UNSTABLE) and drop the explicit CI-master_test dispatch
since the PAT squash-merge's push to master already triggers the release,
avoiding a double release.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-28 20:08:59 +02:00
SirBroccoliandGitHub f220f1bf81 Merge pull request #649 from JChamblee99/master 
kernel registry: add CVE-2026-46333 ptrace exit-race (ssh-keysign-pwn)
 2026-06-28 19:59:00 +02:00
Carlos Polop 615a285482 Merge master into PR 649 2026-06-28 19:56:23 +02:00
Carlos Polop a7a09a338e CVE-2025-9074 2026-06-24 13:30:12 +02:00
SirBroccoliGitHubHackTricks PEASS Wordlist Updater
 		b20a0db319 Auto-merge PR #651 (Chack Agent) 
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz>
 2026-06-22 10:00:16 +00:00
SirBroccoliGitHubHackTricks PEASS Wordlist Updater
 		a9d8395583 Auto-merge PR #648 (Chack Agent) 
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz>
 2026-06-08 08:58:55 +00:00
Carlos Polop e7ac3b2d0e ci: allow master release publishing 2026-06-05 00:51:35 +02:00
Carlos Polop 3a7f622b47 ci: release after trusted windows definitions merge 2026-06-05 00:40:25 +02:00
Carlos Polop 9c109c2d35 ci: require release-triggering token for windows auto-merge 2026-06-05 00:38:42 +02:00
Carlos Polop c7f41f985c ci: trigger release workflow after windows definitions auto-merge 2026-06-05 00:16:31 +02:00
Carlos Polop ade17cfd05 ci: auto-merge windows definition PRs reliably 2026-06-04 23:39:19 +02:00
SirBroccoliGitHubHackTricks PEASS Autoimprover
 		4be3e81aef Auto-merge PR #647 (Chack Agent) 
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz>
 2026-05-31 06:56:24 +00:00
SirBroccoliGitHubHackTricks PEASS Autoimprover
 		01d9795902 Auto-merge PR #646 (Chack Agent) 
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz>
 2026-05-31 06:50:53 +00:00
Carlos Polop d01e61a0ac Merge branch 'master' of github.com:peass-ng/PEASS-ng 2026-05-28 12:44:29 +02:00
Carlos Polop 195fc242ba f 2026-05-28 12:44:26 +02:00
SirBroccoliGitHubHackTricks PEASS Wordlist Updater
 		e5f01f3df7 Auto-merge PR #643 (Chack Agent) 
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz>
 2026-05-25 08:07:28 +00:00
Carlos Polop 18ea88b35b Expand linPEAS module metadata tests 2026-05-21 13:24:52 +02:00
Carlos Polop ca743bf978 Bound linpeas sudo listing checks 2026-05-21 13:09:33 +02:00
Carlos Polop 1ea8107bf5 Fix bot PR auto-merge and linpeas exclude matching 2026-05-21 13:03:38 +02:00
Carlos Polop 15a244cb30 Improve Azure VM managed identity discovery 2026-05-05 17:58:20 +02:00
Carlos Polop 49bafa87a9 f 2026-04-30 13:45:33 +02:00
Carlos Polop 8bf6564d02 f 2026-04-30 13:30:04 +02:00
Carlos Polop c447ef1433 copyfail check 2026-04-30 12:59:09 +02:00
Carlos Polop 2d0eb60e5c ci: merge validated windows definition PRs 2026-04-30 12:00:32 +02:00
Carlos Polop 96b5185cd4 ci: update windows definition bot branch reliably 2026-04-30 11:43:25 +02:00
Carlos Polop d78acd4228 perf: download NVD feeds in parallel 2026-04-30 11:35:41 +02:00
Carlos Polop 7e16c4c635 ci: auto-merge windows definition update PRs 2026-04-30 10:59:50 +02:00
Carlos Polop d142e0f1f8 fix: retry incomplete windows definition downloads 2026-04-30 10:38:31 +02:00
Carlos Polop eb2c3fbfd1 ci: bound windows definition updater runtime 2026-04-30 10:32:57 +02:00
Carlos Polop 3b079e9463 ci: validate windows version definition updates 2026-04-30 10:03:59 +02:00
SirBroccoliGitHubHackTricks PEASS Autoimprover
 		1993984d21 Auto-merge PR #636 (Chack Agent) 
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz>
 2026-04-30 06:07:24 +00:00
SirBroccoliGitHubHackTricks PEASS Autoimprover
 		dfc53a29f9 Auto-merge PR #635 (Chack Agent) 
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz>
 2026-04-30 05:58:03 +00:00
Carlos Polop 5d4b4522ef lhe 2026-04-17 13:15:05 +02:00
SirBroccoliGitHubHackTricks PEASS Autoimprover
 		5841e7c39d Auto-merge PR #628 (Chack Agent) 
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz>
 2026-03-31 05:11:16 +00:00
SirBroccoliGitHubHackTricks PEASS Autoimprover
 		98e5cd39dc Auto-merge PR #627 (Chack Agent) 
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz>
 2026-03-31 05:08:57 +00:00
SirBroccoliGitHubchack-agent
 		b8528da949 Improve container and runtime enumeration (#624) 
* Improve container and runtime enumeration

* Fix CI failures for PR #624

---------

Co-authored-by: chack-agent <chack-agent@users.noreply.github.com>
 2026-03-22 21:44:38 +01:00
Carlos Polop d71e346ab1 f 2026-03-20 16:56:05 +01:00
SirBroccoliGitHubchack-agent
 		1fb7aefa40 Auto-merge PR #622 (Chack Agent) 
* test: trigger linpeas workflow failure

* Fix CI failures for PR #622

* docs: clarify builder output wording

---------

Co-authored-by: chack-agent <chack-agent@users.noreply.github.com>
 2026-03-19 21:27:55 +00:00
Carlos Polop ac133717d2 Add OpenAI fallback to Chack workflows 2026-03-19 19:11:09 +01:00
Carlos Polop ca59d6d0e0 Switch Chack workflows to Codex access token 2026-03-19 19:07:56 +01:00
Carlos Polop 042aa0cd4d f 2026-03-19 16:29:30 +01:00
Carlos Polop 2fb6c4c67d f 2026-03-15 23:33:31 +01:00
Carlos Polop 8a455fde49 Merge branch 'master' of github.com:peass-ng/PEASS-ng 2026-03-15 22:37:12 +01:00
Carlos Polop aafdfcdcee f 2026-03-15 22:36:55 +01:00
Carlos Polop a8f6b16016 Merge branch 'master' of github.com:peass-ng/PEASS-ng 2026-03-08 16:04:31 +01:00
Carlos Polop 287fcc2332 f 2026-03-08 16:04:29 +01:00
Carlos Polop aaaa178974 Merge branch 'master' of github.com:peass-ng/PEASS-ng 2026-03-08 11:41:18 +01:00
Carlos Polop 2bc2911c1d f 2026-03-08 11:41:15 +01:00
Carlos Polop 2f923de45a f 2026-03-07 18:51:19 +01:00
Carlos Polop c799a239b7 Merge branch 'master' of github.com:peass-ng/PEASS-ng 2026-03-07 15:01:56 +01:00
Carlos Polop d44e5b5c5b f 2026-03-07 15:01:54 +01:00
Carlos Polop 7b35ad0e01 Merge branch 'master' of github.com:peass-ng/PEASS-ng 2026-03-01 20:42:07 +01:00
Carlos Polop 954e496636 f 2026-03-01 20:42:05 +01:00
Carlos Polop fce03212ab f 2026-02-28 15:32:42 +01:00
Carlos Polop 6305f8f7c4 f 2026-02-28 14:26:41 +01:00
SirBroccoliGitHubHackTricks PEASS Autoimprover
 		42f126c392 Auto-merge PR #609 (Chack Agent) 
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz>
 2026-02-28 04:20:02 +00:00
SirBroccoliGitHubHackTricks PEASS Wordlist Updater
 		11a506f81a Auto-merge PR #607 (Chack Agent) 
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz>
 2026-02-26 12:20:50 +00:00
Carlos Polop 1bb9b22958 winpeas: use KB supersedence graph for windows version vuln filtering 2026-02-26 01:52:42 +01:00
Carlos Polop 75a67b4511 winpeas: reduce windows-version vuln false positives with KB filtering 2026-02-26 01:42:50 +01:00
Carlos Polop 1d5c216d0c f 2026-02-26 01:35:43 +01:00
Carlos Polop ccf1ca847e Merge branch 'master' of github.com:peass-ng/PEASS-ng 2026-02-26 01:33:28 +01:00
Carlos Polop a441eee83a check windows exploits 2026-02-26 01:33:15 +01:00
SirBroccoliGitHubcarlospolopcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>chack-agentCopilot
 		39e475923f Auto-merge PR #605 (Chack Agent) 
* ci: speed up PR-tests and add linpeas typo fixture

* Fix syntax: use '==' in __main__ guard in linpeas_builder.py

* ci: retrigger pr-tests after fixer

* f

* kernel checks

* Revert PR changes to PR-tests.yml and regexes.yaml (#606)

* Initial plan

* revert: remove PR changes to PR-tests.yml and regexes.yaml

Co-authored-by: carlospolop <17181413+carlospolop@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: carlospolop <17181413+carlospolop@users.noreply.github.com>

---------

Co-authored-by: chack-agent <chack-agent@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: carlospolop <17181413+carlospolop@users.noreply.github.com>
 2026-02-26 00:28:24 +00:00
Carlos Polop 98e5e7c3f2 f 2026-02-24 21:31:15 +01:00
Carlos Polop 3cb5411468 ci: allow chack-agent workflow edits to be pushed 2026-02-24 21:04:53 +01:00
Carlos Polop 1375f61d38 workflow: exclude chack temp artifacts from sanitized master-fix patch 2026-02-14 01:37:17 +01:00
Carlos Polop 45105f6f39 workflow: always sanitize master-fixer output to non-workflow diff 2026-02-14 01:28:56 +01:00
Carlos Polop da70f4f64f workflow: tolerate pr-creation policy block in master fixer 2026-02-14 01:20:39 +01:00
Carlos Polop 45990c68c2 workflow: push chack local commits in master-failure fixer 2026-02-14 01:11:41 +01:00
Carlos Polop 381bf74ebd test: intentional master break in linpeas builder for chack validation 2026-02-14 01:03:28 +01:00
Carlos Polop 44969c086d Revert "workflow: sanitize chack commits and add failure log excerpts (#596)" 
This reverts commit 1e6c83f43b.
 2026-02-14 01:03:10 +01:00
SirBroccoliandGitHub 1e6c83f43b workflow: sanitize chack commits and add failure log excerpts (#596) 2026-02-14 00:40:02 +01:00
SirBroccoliandGitHub 993679e8a2 workflow: push chack-produced commits even when tree is clean (#595) 2026-02-14 00:32:56 +01:00
SirBroccoliandGitHub 82a9aecd08 ci: harden chack rerun flow and restore macos pip compatibility (#593) 2026-02-13 20:47:18 +01:00
SirBroccoliandGitHub c3a942fdba ci: remove macOS pip break-system-packages flags (#592) 2026-02-13 20:35:41 +01:00
SirBroccoliandGitHub 7ca05693ef ci: fix chack agent_config key for task-steps init (#590) 2026-02-13 18:15:25 +01:00
SirBroccoliandGitHub 0ec20d2512 ci: enable chack workflow_run jobs and use codex backend (#589) 2026-02-13 18:11:02 +01:00
Carlos Polop 3e2af030d4 f 2026-02-12 20:02:37 +01:00
Carlos Polop ec746e73e3 additions 2026-02-12 03:44:02 +01:00