Commit Graph
100 Commits
Author SHA1 Message Date
SirBroccoliandGitHub 43a7684621 Merge branch 'master' into update_PEASS-winpeas-Windows_Exploitation_Technique__Ampl_20251217_012647 2026-01-17 15:30:32 +01:00
SirBroccoliandGitHub 182c8974fd Merge pull request #538 from peass-ng/update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841
[WINPEAS] Add privilege escalation check: Inside Ink Dragon Revealing the Relay Ne...
2026-01-17 15:29:36 +01:00
SirBroccoliandGitHub 7b4a83d51d Merge branch 'master' into update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841 2026-01-17 15:29:29 +01:00
SirBroccoliandGitHub 4f8a3b3f25 Merge pull request #531 from peass-ng/update_PEASS-winpeas-pipetap___A_Windows_Named_Pipe_Multi_20251209_013140
[WINPEAS] Add privilege escalation check: pipetap – A Windows Named Pipe Multi-too...
2026-01-17 15:24:20 +01:00
SirBroccoliandGitHub 974cfe028f Merge pull request #533 from peass-ng/update_PEASS-winpeas-Cracking_ValleyRAT__From_Builder_Sec_20251210_185002
[WINPEAS] Add privilege escalation check: Cracking ValleyRAT From Builder Secrets ...
2026-01-17 15:20:38 +01:00
SirBroccoliandGitHub f627e80a1b Merge pull request #528 from peass-ng/update_PEASS-winpeas-LDAP_BOF_Collection___In_Memory_LDAP_20251207_013625
[WINPEAS] Add privilege escalation check: LDAP BOF Collection – In‑Memory LDAP Too...
2026-01-17 15:15:36 +01:00
Carlos Polop a83d33d409 Merge branch 'master' into update_PEASS-winpeas-LDAP_BOF_Collection___In_Memory_LDAP_20251207_013625 2026-01-17 13:36:53 +01:00
Carlos Polop 0e29450869 Merge branch 'master' into update_PEASS-winpeas-pipetap___A_Windows_Named_Pipe_Multi_20251209_013140 2026-01-17 13:36:45 +01:00
Carlos Polop efe9c1625f Merge branch 'master' into update_PEASS-winpeas-Cracking_ValleyRAT__From_Builder_Sec_20251210_185002 2026-01-17 13:36:41 +01:00
Carlos Polop 0e8959a6db Merge branch 'master' into update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841 2026-01-17 13:36:30 +01:00
Carlos Polop ea787df91c Merge branch 'master' into update_PEASS-winpeas-Windows_Exploitation_Technique__Ampl_20251217_012647 2026-01-17 13:36:26 +01:00
Carlos Polop 2046d18e5d chore: trigger CI 2026-01-16 18:17:44 +01:00
Carlos Polop 34d0f18aad chore: trigger CI 2026-01-16 18:17:37 +01:00
Carlos Polop b66eebcc3d chore: trigger CI 2026-01-16 18:17:33 +01:00
Carlos Polop 13656ba172 chore: trigger CI 2026-01-16 18:17:21 +01:00
Carlos Polop 8c043b6164 chore: trigger CI 2026-01-16 18:17:18 +01:00
Carlos Polop 2f9115f97d chore: trigger CI 2026-01-16 18:15:24 +01:00
Carlos Polop 373ed3cce2 chore: trigger CI 2026-01-16 18:15:17 +01:00
Carlos Polop 8eec7cf7f9 chore: trigger CI 2026-01-16 18:15:13 +01:00
Carlos Polop 1d4b748cbc Fix builder GTFOBins parsing and protections metadata 2026-01-16 18:07:04 +01:00
Carlos Polop 69371f825e Fix GTFOBins list fetch for linpeas builder 2026-01-16 18:01:40 +01:00
Carlos Polop 72dbd9ef28 Fix PR tests Go setup and update linpeas parts 2026-01-16 17:56:34 +01:00
SirBroccoliandGitHub 32e9bf657a Merge pull request #537 from Apursuit/fix-busybox-su-false-positive
Fix `su` bruteforce false positives on BusyBox systems (bbsuid)
2026-01-16 17:47:57 +01:00
SirBroccoliandGitHub d6bd661460 Merge pull request #525 from peass-ng/update_PEASS-linpeas-HTB__Era___IDORs__PHP_ssh2_exec_Wrap_20251129_184039
[LINPEAS] Add privilege escalation check: HTB Era – IDORs, PHP ssh2.exec Wrapper R...
2026-01-16 17:38:44 +01:00
SirBroccoliandGitHub ed6263a4b3 Merge pull request #524 from peass-ng/update_PEASS-linpeas-Metasploit_Wrap-Up_11_28_2025_20251129_012934
[LINPEAS] Add privilege escalation check: Metasploit Wrap-Up 11/28/2025
2026-01-16 17:34:21 +01:00
SirBroccoliandGitHub 93bb3e1a64 Merge pull request #523 from peass-ng/update_PEASS-winpeas-Metasploit_Wrap-Up_11_14_2025_20251127_132610
[WINPEAS] Add privilege escalation check: Metasploit Wrap-Up 11/14/2025
2026-01-16 17:33:05 +01:00
SirBroccoliandGitHub bf9d474cd3 Merge pull request #546 from JohannesLks/fix/ssh-key-regex-false-positive
fix: SSH key regex false positive with ImageMagick mime.xml
2026-01-16 17:31:28 +01:00
SirBroccoliandGitHub f856f0b588 Merge pull request #547 from JohannesLks/fix/rdcman-credentials-highlight
fix: Highlight stored credentials in RDCMan.settings
2026-01-14 16:57:35 +01:00
SirBroccoliandGitHub b4a1382e8a Merge pull request #536 from DotNetRussell/patch-1
Fix wording in privilege escalation checklist
2025-12-15 09:52:13 +01:00
carlospolop 0277e447f0 f 2025-12-12 16:25:36 +01:00
carlospolop b09bd92116 f 2025-12-12 14:28:17 +01:00
SirBroccoliandGitHub 8f017f98d3 Merge pull request #532 from compass-dexter/fix/ssh-AuthorizedKeysFile
[LINPEAS] fix(linPEAS): grep for AuthorizedKeysFile
2025-12-12 00:44:51 +01:00
SirBroccoliandGitHub 17cfc6c56e Merge pull request #530 from Xyniath/master
[WINPEAS] Fix misspelling of SeDebugPrivilege in winPEAS output
2025-12-12 00:44:30 +01:00
SirBroccoliandGitHub 94e84dec91 Merge pull request #521 from peass-ng/update_PEASS-winpeas-HackTheBox_Mirage__Chaining_NFS_Leak_20251122_183905
[WINPEAS] Add privilege escalation check: HackTheBox Mirage Chaining NFS Leaks, Dy...
2025-12-07 13:23:17 +01:00
SirBroccoliandGitHub ac80ce3a9a Merge pull request #520 from peass-ng/update_PEASS-linpeas-SupaPwn__Hacking_Our_Way_into_Lovabl_20251119_184112
[LINPEAS] Add privilege escalation check: SupaPwn Hacking Our Way into Lovable’s O...
2025-12-07 13:22:12 +01:00
SirBroccoliandGitHub 313fe6bef5 Update README.md 2025-12-07 13:21:52 +01:00
SirBroccoliandGitHub 80318c5005 Merge pull request #514 from moscowchill/bat-pr
Fix ANSI escape codes displaying as literal text in winPEAS.bat
2025-11-15 15:45:38 +01:00
SirBroccoliandGitHub 7af6c33d39 Merge pull request #513 from sttlr/patch-1
Fix: LinPEASS doesn't run via metasploit module
2025-11-15 15:44:50 +01:00
SirBroccoliandGitHub d75525ebbc Merge pull request #512 from moscowchill/pr-bat-fix
Fix winPEAS.bat compatibility with Windows 11 and modern Windows 10
2025-10-28 01:51:48 +01:00
carlospolop c16c5de36f f 2025-10-18 00:59:40 +02:00
SirBroccoliandGitHub be3fe91da4 Merge pull request #507 from CravateRouge/master
Add ADCS ESC DC registry checks
2025-10-07 10:50:43 +02:00
SirBroccoliandGitHub c83eef9cd8 Merge pull request #502 from peass-ng/update_PEASS-linpeas-HTB_Planning__Grafana_CVE-2024-9264__20250913_182726
[LINPEAS] Add privilege escalation check: HTB Planning Grafana CVE-2024-9264 to Co...
2025-10-04 10:38:22 +02:00
SirBroccoliandGitHub e15a1f2e12 Update 16_Crontab_UI_misconfig.sh 2025-10-04 10:38:02 +02:00
SirBroccoliandGitHub 24e9c54290 Merge pull request #505 from jtothef/patch-1
Update README.md
2025-10-04 10:36:24 +02:00
SirBroccoliandGitHub bdb5c61dad Merge pull request #504 from peass-ng/update_PEASS-linpeas-Forgotten_20250917_063428
[LINPEAS] Add privilege escalation check: Forgotten
2025-10-04 10:36:09 +02:00
SirBroccoliandGitHub ee83c23a74 Update 16_Crontab_UI_misconfig.sh 2025-10-04 10:34:04 +02:00
SirBroccoliandGitHub 7b36014699 Merge pull request #499 from peass-ng/update_PEASS-linpeas-HTB_Environment__Laravel_env_overrid_20250907_013120
[LINPEAS] Add privilege escalation check: HTB Environment Laravel env override (CV...
2025-10-04 10:29:32 +02:00
SirBroccoliandGitHub 6fe8304783 Merge pull request #506 from tropkal/tropkal-patch-1
Update the regex for the sudo version
2025-10-04 10:29:01 +02:00
carlospolop 7c7884fb72 f tf 2025-09-05 01:04:53 +02:00
carlospolop 35300e499b tf 2025-09-05 01:04:18 +02:00
carlospolop 147de0fc88 f 2025-09-03 14:19:59 +02:00
carlospolop afaf596342 f 2025-09-03 13:39:15 +02:00
SirBroccoliandGitHub 215c5d074e Merge pull request #456 from peass-ng/dependabot/nuget/winPEAS/winPEASexe/Tests/System.Text.RegularExpressions-4.3.1
Bump System.Text.RegularExpressions from 4.3.0 to 4.3.1 in /winPEAS/winPEASexe/Tests
2025-09-03 13:36:40 +02:00
SirBroccoliandGitHub ca383a4548 Merge pull request #496 from peass-ng/update_PEASS-linpeas-Case_study__Backup_leak___CI_abuse___20250827_193408
[LINPEAS] Add privilege escalation check: Case study Backup leak → CI abuse → inte...
2025-09-03 13:36:13 +02:00
SirBroccoliandGitHub 46264bf239 Merge pull request #497 from peass-ng/update_PEASS-winpeas-HTB_Sendai__From_password_spray_to_g_20250828_184040
[WINPEAS] Add privilege escalation check: HTB Sendai From password spray to gMSA d...
2025-09-03 13:31:10 +02:00
SirBroccoliandGitHub 642c33304f Merge pull request #494 from peass-ng/update_PEASS-winpeas-HTB__TheFrizz__High-level__redacted__20250827_190719
[WINPEAS] Add privilege escalation check: HTB TheFrizz (High-level, redacted for s...
2025-09-03 13:27:06 +02:00
SirBroccoliandGitHub cc5ab76991 Merge pull request #486 from soobinrho/fix-typo-on-color-explanations
docs: fix typo (conten -> content)
2025-08-27 12:12:28 +02:00
carlospolop 36001d644e Merge branch 'master' of github.com:peass-ng/PEASS-ng 2025-08-25 11:18:18 +02:00
carlospolop fdd414f4aa new workflow 2025-08-25 11:18:16 +02:00
SirBroccoliandGitHub 41128808a6 Merge pull request #483 from securitytime/patch-1
Update Beaprint.cs
2025-07-01 16:23:13 +02:00
carlospolop 6fd96f4bdb f 2025-07-01 12:12:01 +02:00
carlospolop a745f00dd7 fix 2025-07-01 11:10:21 +02:00
SirBroccoliandGitHub 4061cef7e8 Merge pull request #476 from peass-ng/codex/fix-url-reference-in-linpeasbuilder.py
Fix url variable reference in linpeasBuilder
2025-06-25 01:59:43 +02:00
SirBroccoliandGitHub b66ced3c63 Merge pull request #475 from peass-ng/codex/find-and-fix-a-bug
Fix parser global state reuse
2025-06-25 01:59:03 +02:00
SirBroccoliandGitHub cde725dacc Merge pull request #477 from peass-ng/codex/update-docstring-and-fix-typo
Fix docstring and comment in linpeasBuilder
2025-06-25 01:57:58 +02:00
SirBroccoliandGitHub f0f829890c Merge pull request #479 from peass-ng/codex/replace--parth--with--path--in-argparse
Fix typo in linpeas builder arg help
2025-06-25 01:57:11 +02:00
SirBroccoliandGitHub 99c36b8562 Merge pull request #480 from Signum21/master
Fixed multiple bugs in Vulnerable Leaked Handlers
2025-06-25 01:56:58 +02:00
SirBroccoliandGitHub a74c6c820f Merge pull request #482 from Aarav-Juneja/builder-exclude-fix
Fix exclude modules on linPEASS
2025-06-25 01:55:48 +02:00
SirBroccoliandGitHub 53fd4d8dc8 Merge pull request #481 from ertaku12/master
Added a privilege escalation vulnerability for MySQL 4.x/5.x versions.
2025-06-25 01:55:25 +02:00
SirBroccoli d5e3c2a885 Fix typo in linpeas builder output argument 2025-06-06 00:38:05 +02:00
SirBroccoli 4af321d138 Fix docstring and comment typo 2025-06-06 00:01:29 +02:00
SirBroccoli 4e556fd594 Fix variable reference when parsing URLs 2025-06-06 00:01:17 +02:00
SirBroccoli 39066f6867 Fix leftover debug code and reset state in parser 2025-06-06 00:00:39 +02:00
SirBroccoliandGitHub c3a93a57fe Merge pull request #473 from Signum21/master
Fix IdentityNotMappedException in Vulnerable Leaked Handlers
2025-05-31 22:36:49 +02:00
SirBroccoliandGitHub 11e9b8dde6 Merge pull request #472 from Jack-Vaughn/NoEnvVars-Update
Add 4 noisy environment variables to NoEnvVars.sh
2025-05-26 23:57:40 +02:00
carlospolop 88f08a405e l 2025-05-26 02:55:07 +02:00
SirBroccoliandGitHub 322792c4ec Merge pull request #471 from Jack-Vaughn/environ-check
Add module to check for sensitive environment variables via /proc/*/environ
2025-05-26 02:33:43 +02:00
carlospolop 7b8dcfbe8d f 2025-05-25 08:17:07 +02:00
carlospolop aac3667247 f l 2025-05-25 08:15:48 +02:00
carlospolop 64ab193d25 f linpeas 2025-05-25 07:05:48 +02:00
carlospolop aab8241ede f 2025-05-25 02:21:39 +02:00
carlospolop 65b98d11ac only print errors when relevant 2025-05-25 02:10:07 +02:00
carlospolop 1e72dbeb76 impr winpeas networking checks 2025-05-25 01:46:30 +02:00
carlospolop c9282b4bdb fix winpeas? 2025-05-25 01:37:03 +02:00
carlospolop b91334e5b3 fix 2025-05-24 23:37:00 +02:00
carlospolop b7bc20a027 improvement 2025-05-24 23:31:12 +02:00
carlospolop 4fbe6ffd79 winpeas networkinfo test ci/cd 2025-05-24 23:16:31 +02:00
carlospolop c288f3a810 fw 2025-05-24 23:05:13 +02:00
carlospolop f3e29a509f fix winpeas 2025-05-24 23:02:18 +02:00
carlospolop c29fc553b5 Merge branch 'master' of github.com:peass-ng/PEASS-ng 2025-05-24 08:30:12 +02:00
carlospolop 1e7a90d29f cursor rewrite + network checks 2025-05-24 08:29:47 +02:00
SirBroccoliandGitHub 5a5d44f393 Merge pull request #470 from Signum21/master
WinPeas: Differentiate between Allow ACLs and Deny ACLs
2025-05-21 07:06:46 +02:00
carlospolop 604580adbd more 2025-05-19 06:36:39 +02:00
carlospolop 9820c18697 Cursor improvements parts 1 and 2 2025-05-19 06:36:35 +02:00
carlospolop ea9b930fdb fix capabilities module 2025-05-18 14:33:02 +02:00
SirBroccoliandGitHub dae0f7a533 Merge pull request #468 from ThatTotallyRealMyth/ThatTotallyRealMyth-4_capEdit-1
Update 4_Capabilities.sh: Fix capability decoding to prevent shell breaking output from shell/process capabiltiy checking.
2025-05-18 14:19:28 +02:00
carlospolop 3a317cc5c4 fix ec2 2025-05-18 14:17:15 +02:00
carlospolop ef28ef7a33 fix linpeas not getting EC2 metadata 2025-05-18 04:58:22 +02:00
carlospolop 58c107df40 fix kill? 2025-05-18 04:46:19 +02:00
carlospolop 63c090059b kill frozen external binaries 2025-05-18 01:20:32 +02:00