Commit Graph
1840 Commits
Author SHA1 Message Date
SirBroccoliandGitHub 43a7684621 Merge branch 'master' into update_PEASS-winpeas-Windows_Exploitation_Technique__Ampl_20251217_012647 2026-01-17 15:30:32 +01:00
SirBroccoliandGitHub 182c8974fd Merge pull request #538 from peass-ng/update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841
[WINPEAS] Add privilege escalation check: Inside Ink Dragon Revealing the Relay Ne...
20260117-19bc789c
2026-01-17 15:29:36 +01:00
SirBroccoliandGitHub 7b4a83d51d Merge branch 'master' into update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841 2026-01-17 15:29:29 +01:00
SirBroccoliandGitHub 4f8a3b3f25 Merge pull request #531 from peass-ng/update_PEASS-winpeas-pipetap___A_Windows_Named_Pipe_Multi_20251209_013140
[WINPEAS] Add privilege escalation check: pipetap – A Windows Named Pipe Multi-too...
20260117-168a6b6d
2026-01-17 15:24:20 +01:00
SirBroccoliandGitHub 974cfe028f Merge pull request #533 from peass-ng/update_PEASS-winpeas-Cracking_ValleyRAT__From_Builder_Sec_20251210_185002
[WINPEAS] Add privilege escalation check: Cracking ValleyRAT From Builder Secrets ...
20260117-1708cde2
2026-01-17 15:20:38 +01:00
SirBroccoliandGitHub f627e80a1b Merge pull request #528 from peass-ng/update_PEASS-winpeas-LDAP_BOF_Collection___In_Memory_LDAP_20251207_013625
[WINPEAS] Add privilege escalation check: LDAP BOF Collection – In‑Memory LDAP Too...
20260117-db3dfec8
2026-01-17 15:15:36 +01:00
Carlos Polop a83d33d409 Merge branch 'master' into update_PEASS-winpeas-LDAP_BOF_Collection___In_Memory_LDAP_20251207_013625 2026-01-17 13:36:53 +01:00
Carlos Polop 0e29450869 Merge branch 'master' into update_PEASS-winpeas-pipetap___A_Windows_Named_Pipe_Multi_20251209_013140 2026-01-17 13:36:45 +01:00
Carlos Polop efe9c1625f Merge branch 'master' into update_PEASS-winpeas-Cracking_ValleyRAT__From_Builder_Sec_20251210_185002 2026-01-17 13:36:41 +01:00
Carlos Polop 0e8959a6db Merge branch 'master' into update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841 2026-01-17 13:36:30 +01:00
Carlos Polop ea787df91c Merge branch 'master' into update_PEASS-winpeas-Windows_Exploitation_Technique__Ampl_20251217_012647 2026-01-17 13:36:26 +01:00
Carlos Polop 2046d18e5d chore: trigger CI 2026-01-16 18:17:44 +01:00
Carlos Polop 34d0f18aad chore: trigger CI 2026-01-16 18:17:37 +01:00
Carlos Polop b66eebcc3d chore: trigger CI 2026-01-16 18:17:33 +01:00
Carlos Polop 13656ba172 chore: trigger CI 2026-01-16 18:17:21 +01:00
Carlos Polop 8c043b6164 chore: trigger CI 2026-01-16 18:17:18 +01:00
Carlos Polop 2f9115f97d chore: trigger CI 2026-01-16 18:15:24 +01:00
Carlos Polop 373ed3cce2 chore: trigger CI 2026-01-16 18:15:17 +01:00
Carlos Polop 8eec7cf7f9 chore: trigger CI 2026-01-16 18:15:13 +01:00
Carlos Polop 1d4b748cbc Fix builder GTFOBins parsing and protections metadata 20260116-d4b8a4ba 2026-01-16 18:07:04 +01:00
Carlos Polop 69371f825e Fix GTFOBins list fetch for linpeas builder 2026-01-16 18:01:40 +01:00
Carlos Polop 72dbd9ef28 Fix PR tests Go setup and update linpeas parts 2026-01-16 17:56:34 +01:00
SirBroccoliandGitHub 32e9bf657a Merge pull request #537 from Apursuit/fix-busybox-su-false-positive
Fix `su` bruteforce false positives on BusyBox systems (bbsuid)
2026-01-16 17:47:57 +01:00
SirBroccoliandGitHub d6bd661460 Merge pull request #525 from peass-ng/update_PEASS-linpeas-HTB__Era___IDORs__PHP_ssh2_exec_Wrap_20251129_184039
[LINPEAS] Add privilege escalation check: HTB Era – IDORs, PHP ssh2.exec Wrapper R...
2026-01-16 17:38:44 +01:00
SirBroccoliandGitHub ed6263a4b3 Merge pull request #524 from peass-ng/update_PEASS-linpeas-Metasploit_Wrap-Up_11_28_2025_20251129_012934
[LINPEAS] Add privilege escalation check: Metasploit Wrap-Up 11/28/2025
2026-01-16 17:34:21 +01:00
SirBroccoliandGitHub 93bb3e1a64 Merge pull request #523 from peass-ng/update_PEASS-winpeas-Metasploit_Wrap-Up_11_14_2025_20251127_132610
[WINPEAS] Add privilege escalation check: Metasploit Wrap-Up 11/14/2025
2026-01-16 17:33:05 +01:00
SirBroccoliandGitHub bf9d474cd3 Merge pull request #546 from JohannesLks/fix/ssh-key-regex-false-positive
fix: SSH key regex false positive with ImageMagick mime.xml
2026-01-16 17:31:28 +01:00
SirBroccoliandGitHub f856f0b588 Merge pull request #547 from JohannesLks/fix/rdcman-credentials-highlight
fix: Highlight stored credentials in RDCMan.settings
20260114-2f321ee3
2026-01-14 16:57:35 +01:00
JohannesLks 9d35195c56 fix: Highlight stored credentials in RDCMan.settings
RDCMan.settings files can contain encrypted credentials in
credentialsProfiles sections. This change enables content
inspection to highlight:

- credentialsProfiles (indicates stored credentials)
- password (encrypted password value)
- encryptedPassword (alternative password field)

Previously, just_list_file only showed the file path without
inspecting contents, causing stored credentials to be missed.
2026-01-01 22:53:40 +01:00
JohannesLks 4abbf37cc0 fix: SSH key regex false positive with ImageMagick mime.xml
The regex '-----BEGIN .* PRIVATE KEY.*-----' was matching
'-----BEGIN PGP PRIVATE KEY BLOCK-----' in /etc/ImageMagick-6/mime.xml,
causing a false positive for SSH keys.

Fixed by removing the trailing .* before ----- so the regex now requires
the key header to end directly with -----, which excludes PGP key
definitions that have 'BLOCK-----' at the end.

Tested key types still detected:
- RSA PRIVATE KEY
- EC PRIVATE KEY
- OPENSSH PRIVATE KEY
- DSA PRIVATE KEY
2026-01-01 14:07:08 +01:00
HackTricks News Bot 488d388830 Add winpeas privilege escalation checks from: Windows Exploitation Technique: Amplifying Race Windows via Slow Object Manager 2025-12-17 01:34:41 +00:00
HackTricks News Bot 85aa98a841 Add winpeas privilege escalation checks from: Inside Ink Dragon: Revealing the Relay Network and Inner Workings of a Stealthy 2025-12-16 19:11:20 +00:00
npcandGitHub 10b087febf Fix su bruteforce false positives on BusyBox systems (bbsuid)
Fix su bruteforce false positives on BusyBox systems (bbsuid)
2025-12-15 20:23:52 +08:00
SirBroccoliandGitHub b4a1382e8a Merge pull request #536 from DotNetRussell/patch-1
Fix wording in privilege escalation checklist
20251215-2904ebf1 20260101-f70f6a79
2025-12-15 09:52:13 +01:00
DNRandGitHub 877b9b81ce Fix wording in privilege escalation checklist 2025-12-14 12:45:02 -05:00
carlospolop 0277e447f0 f 20251212-32615dcd 2025-12-12 16:25:36 +01:00
carlospolop b09bd92116 f 2025-12-12 14:28:17 +01:00
SirBroccoliandGitHub 8f017f98d3 Merge pull request #532 from compass-dexter/fix/ssh-AuthorizedKeysFile
[LINPEAS] fix(linPEAS): grep for AuthorizedKeysFile
2025-12-12 00:44:51 +01:00
SirBroccoliandGitHub 17cfc6c56e Merge pull request #530 from Xyniath/master
[WINPEAS] Fix misspelling of SeDebugPrivilege in winPEAS output
2025-12-12 00:44:30 +01:00
HackTricks News Bot 9123910f9d Add winpeas privilege escalation checks from: Cracking ValleyRAT: From Builder Secrets to Kernel Rootkits 2025-12-10 19:18:07 +00:00
compass-dexter 7e0f678f33 fix(linPEAS): grep for AuthorizedKeysFile
According to sshd_config(5) this is the correct setting
2025-12-10 16:58:13 +01:00
HackTricks News Bot b7b7aebf1c Add winpeas privilege escalation checks from: pipetap – A Windows Named Pipe Multi-tool and Proxy for Intercepting and Replayi 2025-12-09 02:07:57 +00:00
Matt 595e021864 fix: correct typo of SeDebugPrivilege 2025-12-08 00:27:02 +00:00
SirBroccoliandGitHub 94e84dec91 Merge pull request #521 from peass-ng/update_PEASS-winpeas-HackTheBox_Mirage__Chaining_NFS_Leak_20251122_183905
[WINPEAS] Add privilege escalation check: HackTheBox Mirage Chaining NFS Leaks, Dy...
2025-12-07 13:23:17 +01:00
SirBroccoliandGitHub ac80ce3a9a Merge pull request #520 from peass-ng/update_PEASS-linpeas-SupaPwn__Hacking_Our_Way_into_Lovabl_20251119_184112
[LINPEAS] Add privilege escalation check: SupaPwn Hacking Our Way into Lovable’s O...
2025-12-07 13:22:12 +01:00
SirBroccoliandGitHub 313fe6bef5 Update README.md 2025-12-07 13:21:52 +01:00
HackTricks News Bot 4dad7599e6 Add winpeas privilege escalation checks from: LDAP BOF Collection – In‑Memory LDAP Toolkit for Active Directory Exploitation 2025-12-07 01:59:18 +00:00
HackTricks News Bot b188ac34b6 Add linpeas privilege escalation checks from: HTB: Era – IDORs, PHP ssh2.exec Wrapper RCE, and Custom-Signed Binary Privilege 2025-11-29 18:48:21 +00:00
HackTricks News Bot e99e64cddf Add linpeas privilege escalation checks from: Metasploit Wrap-Up 11/28/2025 2025-11-29 01:41:29 +00:00
HackTricks News Bot dd220af544 Add winpeas privilege escalation checks from: Metasploit Wrap-Up 11/14/2025 2025-11-27 13:44:39 +00:00