SirBroccoli and GitHub
43a7684621
Merge branch 'master' into update_PEASS-winpeas-Windows_Exploitation_Technique__Ampl_20251217_012647
2026-01-17 15:30:32 +01:00
SirBroccoli and GitHub
182c8974fd
Merge pull request #538 from peass-ng/update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841
...
[WINPEAS] Add privilege escalation check: Inside Ink Dragon Revealing the Relay Ne...
20260117-19bc789c
2026-01-17 15:29:36 +01:00
SirBroccoli and GitHub
7b4a83d51d
Merge branch 'master' into update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841
2026-01-17 15:29:29 +01:00
SirBroccoli and GitHub
4f8a3b3f25
Merge pull request #531 from peass-ng/update_PEASS-winpeas-pipetap___A_Windows_Named_Pipe_Multi_20251209_013140
...
[WINPEAS] Add privilege escalation check: pipetap – A Windows Named Pipe Multi-too...
20260117-168a6b6d
2026-01-17 15:24:20 +01:00
SirBroccoli and GitHub
974cfe028f
Merge pull request #533 from peass-ng/update_PEASS-winpeas-Cracking_ValleyRAT__From_Builder_Sec_20251210_185002
...
[WINPEAS] Add privilege escalation check: Cracking ValleyRAT From Builder Secrets ...
20260117-1708cde2
2026-01-17 15:20:38 +01:00
SirBroccoli and GitHub
f627e80a1b
Merge pull request #528 from peass-ng/update_PEASS-winpeas-LDAP_BOF_Collection___In_Memory_LDAP_20251207_013625
...
[WINPEAS] Add privilege escalation check: LDAP BOF Collection – In‑Memory LDAP Too...
20260117-db3dfec8
2026-01-17 15:15:36 +01:00
Carlos Polop
a83d33d409
Merge branch 'master' into update_PEASS-winpeas-LDAP_BOF_Collection___In_Memory_LDAP_20251207_013625
2026-01-17 13:36:53 +01:00
Carlos Polop
0e29450869
Merge branch 'master' into update_PEASS-winpeas-pipetap___A_Windows_Named_Pipe_Multi_20251209_013140
2026-01-17 13:36:45 +01:00
Carlos Polop
efe9c1625f
Merge branch 'master' into update_PEASS-winpeas-Cracking_ValleyRAT__From_Builder_Sec_20251210_185002
2026-01-17 13:36:41 +01:00
Carlos Polop
0e8959a6db
Merge branch 'master' into update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841
2026-01-17 13:36:30 +01:00
Carlos Polop
ea787df91c
Merge branch 'master' into update_PEASS-winpeas-Windows_Exploitation_Technique__Ampl_20251217_012647
2026-01-17 13:36:26 +01:00
Carlos Polop
2046d18e5d
chore: trigger CI
2026-01-16 18:17:44 +01:00
Carlos Polop
34d0f18aad
chore: trigger CI
2026-01-16 18:17:37 +01:00
Carlos Polop
b66eebcc3d
chore: trigger CI
2026-01-16 18:17:33 +01:00
Carlos Polop
13656ba172
chore: trigger CI
2026-01-16 18:17:21 +01:00
Carlos Polop
8c043b6164
chore: trigger CI
2026-01-16 18:17:18 +01:00
Carlos Polop
2f9115f97d
chore: trigger CI
2026-01-16 18:15:24 +01:00
Carlos Polop
373ed3cce2
chore: trigger CI
2026-01-16 18:15:17 +01:00
Carlos Polop
8eec7cf7f9
chore: trigger CI
2026-01-16 18:15:13 +01:00
Carlos Polop
1d4b748cbc
Fix builder GTFOBins parsing and protections metadata
20260116-d4b8a4ba
2026-01-16 18:07:04 +01:00
Carlos Polop
69371f825e
Fix GTFOBins list fetch for linpeas builder
2026-01-16 18:01:40 +01:00
Carlos Polop
72dbd9ef28
Fix PR tests Go setup and update linpeas parts
2026-01-16 17:56:34 +01:00
SirBroccoli and GitHub
32e9bf657a
Merge pull request #537 from Apursuit/fix-busybox-su-false-positive
...
Fix `su` bruteforce false positives on BusyBox systems (bbsuid)
2026-01-16 17:47:57 +01:00
SirBroccoli and GitHub
d6bd661460
Merge pull request #525 from peass-ng/update_PEASS-linpeas-HTB__Era___IDORs__PHP_ssh2_exec_Wrap_20251129_184039
...
[LINPEAS] Add privilege escalation check: HTB Era – IDORs, PHP ssh2.exec Wrapper R...
2026-01-16 17:38:44 +01:00
SirBroccoli and GitHub
ed6263a4b3
Merge pull request #524 from peass-ng/update_PEASS-linpeas-Metasploit_Wrap-Up_11_28_2025_20251129_012934
...
[LINPEAS] Add privilege escalation check: Metasploit Wrap-Up 11/28/2025
2026-01-16 17:34:21 +01:00
SirBroccoli and GitHub
93bb3e1a64
Merge pull request #523 from peass-ng/update_PEASS-winpeas-Metasploit_Wrap-Up_11_14_2025_20251127_132610
...
[WINPEAS] Add privilege escalation check: Metasploit Wrap-Up 11/14/2025
2026-01-16 17:33:05 +01:00
SirBroccoli and GitHub
bf9d474cd3
Merge pull request #546 from JohannesLks/fix/ssh-key-regex-false-positive
...
fix: SSH key regex false positive with ImageMagick mime.xml
2026-01-16 17:31:28 +01:00
SirBroccoli and GitHub
f856f0b588
Merge pull request #547 from JohannesLks/fix/rdcman-credentials-highlight
...
fix: Highlight stored credentials in RDCMan.settings
20260114-2f321ee3
2026-01-14 16:57:35 +01:00
JohannesLks
9d35195c56
fix: Highlight stored credentials in RDCMan.settings
...
RDCMan.settings files can contain encrypted credentials in
credentialsProfiles sections. This change enables content
inspection to highlight:
- credentialsProfiles (indicates stored credentials)
- password (encrypted password value)
- encryptedPassword (alternative password field)
Previously, just_list_file only showed the file path without
inspecting contents, causing stored credentials to be missed.
2026-01-01 22:53:40 +01:00
JohannesLks
4abbf37cc0
fix: SSH key regex false positive with ImageMagick mime.xml
...
The regex '-----BEGIN .* PRIVATE KEY.*-----' was matching
'-----BEGIN PGP PRIVATE KEY BLOCK-----' in /etc/ImageMagick-6/mime.xml,
causing a false positive for SSH keys.
Fixed by removing the trailing .* before ----- so the regex now requires
the key header to end directly with -----, which excludes PGP key
definitions that have 'BLOCK-----' at the end.
Tested key types still detected:
- RSA PRIVATE KEY
- EC PRIVATE KEY
- OPENSSH PRIVATE KEY
- DSA PRIVATE KEY
2026-01-01 14:07:08 +01:00
HackTricks News Bot
488d388830
Add winpeas privilege escalation checks from: Windows Exploitation Technique: Amplifying Race Windows via Slow Object Manager
2025-12-17 01:34:41 +00:00
HackTricks News Bot
85aa98a841
Add winpeas privilege escalation checks from: Inside Ink Dragon: Revealing the Relay Network and Inner Workings of a Stealthy
2025-12-16 19:11:20 +00:00
npc and GitHub
10b087febf
Fix su bruteforce false positives on BusyBox systems (bbsuid)
...
Fix su bruteforce false positives on BusyBox systems (bbsuid)
2025-12-15 20:23:52 +08:00
SirBroccoli and GitHub
b4a1382e8a
Merge pull request #536 from DotNetRussell/patch-1
...
Fix wording in privilege escalation checklist
20251215-2904ebf1
20260101-f70f6a79
2025-12-15 09:52:13 +01:00
DNR and GitHub
877b9b81ce
Fix wording in privilege escalation checklist
2025-12-14 12:45:02 -05:00
carlospolop
0277e447f0
f
20251212-32615dcd
2025-12-12 16:25:36 +01:00
carlospolop
b09bd92116
f
2025-12-12 14:28:17 +01:00
SirBroccoli and GitHub
8f017f98d3
Merge pull request #532 from compass-dexter/fix/ssh-AuthorizedKeysFile
...
[LINPEAS] fix(linPEAS): grep for AuthorizedKeysFile
2025-12-12 00:44:51 +01:00
SirBroccoli and GitHub
17cfc6c56e
Merge pull request #530 from Xyniath/master
...
[WINPEAS] Fix misspelling of SeDebugPrivilege in winPEAS output
2025-12-12 00:44:30 +01:00
HackTricks News Bot
9123910f9d
Add winpeas privilege escalation checks from: Cracking ValleyRAT: From Builder Secrets to Kernel Rootkits
2025-12-10 19:18:07 +00:00
compass-dexter
7e0f678f33
fix(linPEAS): grep for AuthorizedKeysFile
...
According to sshd_config(5) this is the correct setting
2025-12-10 16:58:13 +01:00
HackTricks News Bot
b7b7aebf1c
Add winpeas privilege escalation checks from: pipetap – A Windows Named Pipe Multi-tool and Proxy for Intercepting and Replayi
2025-12-09 02:07:57 +00:00
Matt
595e021864
fix: correct typo of SeDebugPrivilege
2025-12-08 00:27:02 +00:00
SirBroccoli and GitHub
94e84dec91
Merge pull request #521 from peass-ng/update_PEASS-winpeas-HackTheBox_Mirage__Chaining_NFS_Leak_20251122_183905
...
[WINPEAS] Add privilege escalation check: HackTheBox Mirage Chaining NFS Leaks, Dy...
2025-12-07 13:23:17 +01:00
SirBroccoli and GitHub
ac80ce3a9a
Merge pull request #520 from peass-ng/update_PEASS-linpeas-SupaPwn__Hacking_Our_Way_into_Lovabl_20251119_184112
...
[LINPEAS] Add privilege escalation check: SupaPwn Hacking Our Way into Lovable’s O...
2025-12-07 13:22:12 +01:00
SirBroccoli and GitHub
313fe6bef5
Update README.md
2025-12-07 13:21:52 +01:00
HackTricks News Bot
4dad7599e6
Add winpeas privilege escalation checks from: LDAP BOF Collection – In‑Memory LDAP Toolkit for Active Directory Exploitation
2025-12-07 01:59:18 +00:00
HackTricks News Bot
b188ac34b6
Add linpeas privilege escalation checks from: HTB: Era – IDORs, PHP ssh2.exec Wrapper RCE, and Custom-Signed Binary Privilege
2025-11-29 18:48:21 +00:00
HackTricks News Bot
e99e64cddf
Add linpeas privilege escalation checks from: Metasploit Wrap-Up 11/28/2025
2025-11-29 01:41:29 +00:00
HackTricks News Bot
dd220af544
Add winpeas privilege escalation checks from: Metasploit Wrap-Up 11/14/2025
2025-11-27 13:44:39 +00:00