Commit Graph
1757 Commits
Author SHA1 Message Date
Signum21andGitHub 368f0af794 WinPeas: Differentiate between Allow ACLs and Deny ACLs
Works for files, folders, registry keys and named pipes
2025-05-21 03:33:33 +02:00
carlospolop 604580adbd more 2025-05-19 06:36:39 +02:00
carlospolop 9820c18697 Cursor improvements parts 1 and 2 2025-05-19 06:36:35 +02:00
carlospolop ea9b930fdb fix capabilities module 20250518-5781f7e5 2025-05-18 14:33:02 +02:00
SirBroccoliandGitHub dae0f7a533 Merge pull request #468 from ThatTotallyRealMyth/ThatTotallyRealMyth-4_capEdit-1
Update 4_Capabilities.sh: Fix capability decoding to prevent shell breaking output from shell/process capabiltiy checking.
2025-05-18 14:19:28 +02:00
carlospolop 3a317cc5c4 fix ec2 2025-05-18 14:17:15 +02:00
ThatTotallyRealMythandGitHub 01bf3a4ef8 Update 4_Capabilities.sh: Fix capability decoding to prevent sequence number output
Testing confirmed that certain capability values (specifically ffffffffffffffff) cause memory allocation errors in capsh:
"xrealloc: cannot allocate 716488832 bytes (57344 bytes allocated)"

These memory errors were being propagated into the output, causing the long sequence of numbers. The fix prevents these errors from affecting the script's output.
2025-05-18 16:05:01 +10:00
carlospolop ef28ef7a33 fix linpeas not getting EC2 metadata 2025-05-18 04:58:22 +02:00
carlospolop 58c107df40 fix kill? 2025-05-18 04:46:19 +02:00
carlospolop 63c090059b kill frozen external binaries 2025-05-18 01:20:32 +02:00
carlospolop 4c16f72ae2 fix 2025-05-17 16:09:36 +02:00
carlospolop 85684b39ad add timeout 120 when executing external binary 2025-05-17 16:06:35 +02:00
SirBroccoliandGitHub c0b171a5c1 Update peass.rb 2025-05-16 22:25:10 +02:00
SirBroccoliandGitHub ddc2d95cb4 Update peass.rb 20250516-38f0186a 2025-05-16 15:53:43 +02:00
Carlos Polop 97ae1d2e3b Merge branch 'master' of github.com:peass-ng/PEASS-ng 20250424-d80957fb 20250501-c34edb3c 2025-04-24 04:20:22 +02:00
Carlos Polop 3b6f0a5bdc f 2025-04-24 04:20:19 +02:00
SirBroccoliandGitHub 7008652029 Merge pull request #462 from jahway603/jahway603-patch-1
Minor URL fix
20250401-a1b119bc
2025-03-30 19:18:52 +02:00
SirBroccoliandGitHub e5239f8c58 Merge pull request #461 from Signum21/master
Handle path access denied
20250330-549cb967
2025-03-30 19:18:34 +02:00
SirBroccoliandGitHub b2c03246d2 Merge pull request #459 from gildasio/master
Set grep to show filename that contains passwords
20250330-9284b167
2025-03-30 19:18:13 +02:00
SirBroccoliandGitHub f0686d491b Merge pull request #464 from spkal01/master
Rework PEASS url logic for the metasploit module
20250329-2151d069
2025-03-29 21:56:35 +01:00
spkal01 99e8eb7813 Rework PEASS url logic for the metasploit module 2025-03-29 21:45:58 +02:00
Carlos Polop 46193aa0d5 fix 20250320-91fb36a0 2025-03-20 05:13:54 +01:00
Carlos Polop 62022abc47 impr winpeas 2025-03-20 05:02:34 +01:00
jahway603 d63e737b63 Minor URL fix 2025-03-18 12:33:50 -04:00
Signum21andGitHub 0b041ad694 Handle path access denied
The program crashes when trying to access a path that is not allowed.
An exampe of this can be found on the latest HackTheBox machine (TheFrizz) where the starting user can't access the path C:\Users
2025-03-16 05:43:48 +01:00
Gildasio Junior 8ea67f3cc2 Set grep to show filename that contains passwords
This way one can identify which file contains the relevant information,
eg:

/var/log/responder/Poisoners-Session.log:2025-02-09 21:12:12,701 - [*] Skipping previously captured cleartext password for donald
/var/log/responder/Responder-Session.log:11/02/2025 12:33:11 PM - [HTTP] Basic Password : bambam
/var/log/responder/Responder-Session.log:11/02/2025 12:36:12 PM - [HTTP] Basic Password : estrella
2025-02-28 19:54:44 -03:00
Carlos Polop ce5cb1ad9c fix 20250301-c97fb02a 20250223-a8d560c8 2025-02-24 00:21:09 +01:00
Carlos Polop 30586c064f Merge branch 'master' of github.com:peass-ng/PEASS-ng 20250223-e389d4c2 2025-02-23 23:58:45 +01:00
Carlos Polop b82fc9ac39 improve winpeas azure env detection 2025-02-23 23:58:41 +01:00
SirBroccoliandGitHub 54818756e4 Update README.md 20250223-d952199c 2025-02-23 23:47:47 +01:00
Carlos Polop 516aafff27 fix wget 20250216-fd69e735 2025-02-16 17:36:01 +01:00
Carlos Polop 2b64ffc803 a 20250216-cab9fe42 2025-02-16 16:15:19 +01:00
Carlos Polop 9f8563c751 improve linpeas 20250215-2b75946e 2025-02-15 18:14:56 +01:00
Carlos Polop 573acee58c improve azure linpeas 20250215-d1d0adc4 2025-02-15 17:43:42 +01:00
SirBroccoliandGitHub 41e00d5618 Merge pull request #458 from DidierA/macos_echo
Fix echo -n on macOS
20250202-a3a1123d
2025-02-02 13:49:16 +01:00
SirBroccoliandGitHub 536913e7f0 Merge pull request #457 from gcorrall/fix_28_files_with_passwords
Fix 28_Files_with_passwords.sh
20250202-3118d539
2025-02-02 13:48:14 +01:00
DidierA 4d771fb1f6 Fix echo -n on macOS 2025-01-31 16:45:24 +01:00
Gary Corrall 4964033d44 Fix 28_Files_with_passwords.sh 2025-01-29 16:33:54 +00:00
Carlos Polop 092af1413d update azure files with tokens 20250201-73c8835d 20250126-41ed0f6a 2025-01-26 15:58:48 +01:00
Carlos Polop 7cd9e6f78b az tokens 20250124-6ec1269f 2025-01-25 00:40:15 +01:00
Carlos Polop 21a5ef9325 add az tokens 20250124-797af3ec 2025-01-24 19:27:57 +01:00
SirBroccoliandGitHub c3744a730b Merge pull request #453 from KatsuragiCSL/patch-1
swap ppid and pid user in "PPID belongs to a different user (not root)" test
20250113-4426d62e
2025-01-13 12:16:51 +01:00
KatsuragiCSLandGitHub 7abe31c107 swap ppid and pid user in "PPID belongs to a different user (not root)" test
Seems like it is reporting processes with ppid user root instead of not root. e.g. I see it reports "proc xyz with ppid 1 is run by user messagebus but the ppid user is root" when run in a linux box
2025-01-13 18:17:51 +08:00
Carlos Polop 3e8078f1cb fix reponse var 20250112-c19ae6c3 2025-01-12 13:23:01 +01:00
Carlos Polop abd1f3d4b5 improved support az metadata 2025-01-11 19:51:14 +01:00
Carlos Polop 7e749c50ac fix 20250110-31084f44 2025-01-10 09:33:20 +01:00
Carlos Polop 2e74ef4a2c fix id check_az_automation_acc 2025-01-10 09:23:20 +01:00
Carlos Polop bc9a368626 az automation account 2025-01-10 09:21:52 +01:00
SirBroccoliandGitHub 818dea92f3 Merge pull request #452 from JaimePolop/master
Brief description of your changes
20250106-5a706ae2
2025-01-06 19:30:32 +01:00
Jimmy 96b7bdaf91 Brief description of your changes 2025-01-06 13:55:15 +01:00