Carlos Polop
ca84505efc
fix: refine CVE-2025-38236 kernel ranges
2026-06-29 12:46:51 +02:00
kkreiju
341458ecf0
fix: resolve CVE-2025-38236 kernel version constraints
2026-06-29 17:23:55 +08:00
32c351ab68
chore(winpeas): update windows version vulnerability definitions
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-28 19:05:54 +00:00
Carlos Polop and Claude Opus 4.8
f4c29dbb03
ci: build, wait and merge windows definition PRs inline (no workflow_run/PAT-dispatch)
...
CODEX_FIXER_TOKEN is a fine-grained PAT with Contents/Pull-requests write but NOT
Actions:write, so it cannot create a workflow_dispatch event; and a github.token
-dispatched run never emits a workflow_run event to drive the triage merge job. So
neither half of the old cross-workflow design could work.
Instead, update_windows_version_definitions.yml now dispatches PR-tests with
github.token (this workflow already has actions:write), polls that run directly,
and on success squash-merges the PR with the CODEX_FIXER_TOKEN PAT so the push to
master triggers CI-master_test -> Publish_release. Remove the now-dead
auto_merge_windows_definition_bot_pr job from chack-agent-pr-triage.yml and the
temporary token probe. Bump the job timeout to 90m to cover the inline wait.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:33:50 +02:00
Carlos Polop and Claude Opus 4.8
e193030157
ci: probe CODEX_FIXER_TOKEN contents/PR write (temporary)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:31:00 +02:00
Carlos Polop and Claude Opus 4.8
5ca6d6b797
ci: use CODEX_FIXER_TOKEN for bot PR auto-merge (secret CHACK_AGENT_FIXER_TOKEN never existed)
...
The workflows referenced a secret (CHACK_AGENT_FIXER_TOKEN) that does not exist
in the repo, so it resolved to empty and the windows-definitions auto-merge could
neither dispatch PR-tests nor merge. Point every reference at the existing
CODEX_FIXER_TOKEN PAT (fine-grained, admin on the repo) instead. Remove the
temporary token probe.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:24:19 +02:00
Carlos Polop and Claude Opus 4.8
dd11345f50
ci: temporary token probe (to be removed)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:21:46 +02:00
Carlos Polop and Claude Opus 4.8
0a1b242fcf
ci: actually auto-merge windows definition bot PRs
...
Dispatch PR-tests with a PAT instead of github.token: a workflow run owned
by GITHUB_TOKEN does not emit a downstream `workflow_run` event, so the
chack-agent-pr-triage auto-merge job never fired for the bot PR. Also accept
the UNSTABLE merge state (the bot PR's `action_required` pull_request run
keeps it permanently UNSTABLE) and drop the explicit CI-master_test dispatch
since the PAT squash-merge's push to master already triggers the release,
avoiding a double release.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:08:59 +02:00
SirBroccoli and GitHub
f220f1bf81
Merge pull request #649 from JChamblee99/master
...
kernel registry: add CVE-2026-46333 ptrace exit-race (ssh-keysign-pwn)
2026-06-28 19:59:00 +02:00
Carlos Polop
615a285482
Merge master into PR 649
2026-06-28 19:56:23 +02:00
Carlos Polop
a7a09a338e
CVE-2025-9074
2026-06-24 13:30:12 +02:00
b20a0db319
Auto-merge PR #651 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz >
2026-06-22 10:00:16 +00:00
JChamblee99
e0faca1926
Added checks for CVE-2026-46333
2026-06-11 12:40:07 -05:00
a9d8395583
Auto-merge PR #648 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz >
2026-06-08 08:58:55 +00:00
Carlos Polop
e7ac3b2d0e
ci: allow master release publishing
2026-06-05 00:51:35 +02:00
Carlos Polop
3a7f622b47
ci: release after trusted windows definitions merge
2026-06-05 00:40:25 +02:00
Carlos Polop
9c109c2d35
ci: require release-triggering token for windows auto-merge
2026-06-05 00:38:42 +02:00
Carlos Polop
c7f41f985c
ci: trigger release workflow after windows definitions auto-merge
2026-06-05 00:16:31 +02:00
e23cc3b749
chore(winpeas): update windows version vulnerability definitions
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-04 21:43:01 +00:00
Carlos Polop
ade17cfd05
ci: auto-merge windows definition PRs reliably
2026-06-04 23:39:19 +02:00
4be3e81aef
Auto-merge PR #647 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-05-31 06:56:24 +00:00
01d9795902
Auto-merge PR #646 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-05-31 06:50:53 +00:00
Carlos Polop
d01e61a0ac
Merge branch 'master' of github.com:peass-ng/PEASS-ng
2026-05-28 12:44:29 +02:00
Carlos Polop
195fc242ba
f
2026-05-28 12:44:26 +02:00
e5f01f3df7
Auto-merge PR #643 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz >
2026-05-25 08:07:28 +00:00
eb31e0dda4
chore(winpeas): update windows version vulnerability definitions ( #641 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-21 13:29:29 +02:00
Carlos Polop
18ea88b35b
Expand linPEAS module metadata tests
2026-05-21 13:24:52 +02:00
Carlos Polop
ca743bf978
Bound linpeas sudo listing checks
2026-05-21 13:09:33 +02:00
Carlos Polop
1ea8107bf5
Fix bot PR auto-merge and linpeas exclude matching
2026-05-21 13:03:38 +02:00
e5866ca0a1
chore(winpeas): update windows version vulnerability definitions ( #638 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-10 19:02:06 +02:00
sammonsempes and GitHub
0d6dab6c1e
[LINPEAS] Add Dirty Frag check (CVE-2026-43284 / CVE-2026-43500) ( #640 )
2026-05-10 19:01:55 +02:00
179f79794d
Fix broken link for PackageKit Pack2TheRoot ( #639 )
...
Co-authored-by: Rodrigo <rodrigo@192>
2026-05-06 10:50:12 +02:00
Carlos Polop
15a244cb30
Improve Azure VM managed identity discovery
2026-05-05 17:58:20 +02:00
Carlos Polop
49bafa87a9
f
2026-04-30 13:45:33 +02:00
Carlos Polop
8bf6564d02
f
2026-04-30 13:30:04 +02:00
Carlos Polop
c447ef1433
copyfail check
2026-04-30 12:59:09 +02:00
Carlos Polop
2d0eb60e5c
ci: merge validated windows definition PRs
2026-04-30 12:00:32 +02:00
ad0bc26fb0
chore(winpeas): update windows version vulnerability definitions
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-30 12:00:21 +02:00
Carlos Polop
96b5185cd4
ci: update windows definition bot branch reliably
2026-04-30 11:43:25 +02:00
Carlos Polop
d78acd4228
perf: download NVD feeds in parallel
2026-04-30 11:35:41 +02:00
Carlos Polop
7e16c4c635
ci: auto-merge windows definition update PRs
2026-04-30 10:59:50 +02:00
Carlos Polop
d142e0f1f8
fix: retry incomplete windows definition downloads
2026-04-30 10:38:31 +02:00
Carlos Polop
eb2c3fbfd1
ci: bound windows definition updater runtime
2026-04-30 10:32:57 +02:00
Carlos Polop
3b079e9463
ci: validate windows version definition updates
2026-04-30 10:03:59 +02:00
5676661aac
chore(winpeas): update windows version vulnerability definitions ( #631 )
...
Co-authored-by: carlospolop <17181413+carlospolop@users.noreply.github.com >
2026-04-30 10:01:29 +02:00
Théo Louis-Tisserand and GitHub
e9dc98fc9c
fix(linpeas): correct pkexec version regex pattern ( #632 )
2026-04-30 10:00:50 +02:00
1993984d21
Auto-merge PR #636 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-04-30 06:07:24 +00:00
dfc53a29f9
Auto-merge PR #635 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-04-30 05:58:03 +00:00
sammonsempes and GitHub
f8273fa13b
feat: detect PackageKit Pack2TheRoot (CVE-2026-41651) ( #634 )
2026-04-22 20:05:17 +02:00
Carlos Polop
5d4b4522ef
lhe
2026-04-17 13:15:05 +02:00
Carlos Polop