Carlos Polop and Claude Opus 4.8
e193030157
ci: probe CODEX_FIXER_TOKEN contents/PR write (temporary)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:31:00 +02:00
Carlos Polop and Claude Opus 4.8
5ca6d6b797
ci: use CODEX_FIXER_TOKEN for bot PR auto-merge (secret CHACK_AGENT_FIXER_TOKEN never existed)
...
The workflows referenced a secret (CHACK_AGENT_FIXER_TOKEN) that does not exist
in the repo, so it resolved to empty and the windows-definitions auto-merge could
neither dispatch PR-tests nor merge. Point every reference at the existing
CODEX_FIXER_TOKEN PAT (fine-grained, admin on the repo) instead. Remove the
temporary token probe.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:24:19 +02:00
Carlos Polop and Claude Opus 4.8
dd11345f50
ci: temporary token probe (to be removed)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:21:46 +02:00
Carlos Polop and Claude Opus 4.8
0a1b242fcf
ci: actually auto-merge windows definition bot PRs
...
Dispatch PR-tests with a PAT instead of github.token: a workflow run owned
by GITHUB_TOKEN does not emit a downstream `workflow_run` event, so the
chack-agent-pr-triage auto-merge job never fired for the bot PR. Also accept
the UNSTABLE merge state (the bot PR's `action_required` pull_request run
keeps it permanently UNSTABLE) and drop the explicit CI-master_test dispatch
since the PAT squash-merge's push to master already triggers the release,
avoiding a double release.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:08:59 +02:00
SirBroccoli and GitHub
f220f1bf81
Merge pull request #649 from JChamblee99/master
...
kernel registry: add CVE-2026-46333 ptrace exit-race (ssh-keysign-pwn)
2026-06-28 19:59:00 +02:00
Carlos Polop
615a285482
Merge master into PR 649
2026-06-28 19:56:23 +02:00
Carlos Polop
a7a09a338e
CVE-2025-9074
2026-06-24 13:30:12 +02:00
b20a0db319
Auto-merge PR #651 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz >
2026-06-22 10:00:16 +00:00
JChamblee99
e0faca1926
Added checks for CVE-2026-46333
2026-06-11 12:40:07 -05:00
a9d8395583
Auto-merge PR #648 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz >
2026-06-08 08:58:55 +00:00
Carlos Polop
e7ac3b2d0e
ci: allow master release publishing
2026-06-05 00:51:35 +02:00
Carlos Polop
3a7f622b47
ci: release after trusted windows definitions merge
2026-06-05 00:40:25 +02:00
Carlos Polop
9c109c2d35
ci: require release-triggering token for windows auto-merge
2026-06-05 00:38:42 +02:00
Carlos Polop
c7f41f985c
ci: trigger release workflow after windows definitions auto-merge
2026-06-05 00:16:31 +02:00
e23cc3b749
chore(winpeas): update windows version vulnerability definitions
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-04 21:43:01 +00:00
Carlos Polop
ade17cfd05
ci: auto-merge windows definition PRs reliably
2026-06-04 23:39:19 +02:00
4be3e81aef
Auto-merge PR #647 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-05-31 06:56:24 +00:00
01d9795902
Auto-merge PR #646 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-05-31 06:50:53 +00:00
Carlos Polop
d01e61a0ac
Merge branch 'master' of github.com:peass-ng/PEASS-ng
2026-05-28 12:44:29 +02:00
Carlos Polop
195fc242ba
f
2026-05-28 12:44:26 +02:00
e5f01f3df7
Auto-merge PR #643 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz >
2026-05-25 08:07:28 +00:00
eb31e0dda4
chore(winpeas): update windows version vulnerability definitions ( #641 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-21 13:29:29 +02:00
Carlos Polop
18ea88b35b
Expand linPEAS module metadata tests
2026-05-21 13:24:52 +02:00
Carlos Polop
ca743bf978
Bound linpeas sudo listing checks
2026-05-21 13:09:33 +02:00
Carlos Polop
1ea8107bf5
Fix bot PR auto-merge and linpeas exclude matching
2026-05-21 13:03:38 +02:00
e5866ca0a1
chore(winpeas): update windows version vulnerability definitions ( #638 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-10 19:02:06 +02:00
sammonsempes and GitHub
0d6dab6c1e
[LINPEAS] Add Dirty Frag check (CVE-2026-43284 / CVE-2026-43500) ( #640 )
2026-05-10 19:01:55 +02:00
179f79794d
Fix broken link for PackageKit Pack2TheRoot ( #639 )
...
Co-authored-by: Rodrigo <rodrigo@192>
2026-05-06 10:50:12 +02:00
Carlos Polop
15a244cb30
Improve Azure VM managed identity discovery
2026-05-05 17:58:20 +02:00
Carlos Polop
49bafa87a9
f
2026-04-30 13:45:33 +02:00
Carlos Polop
8bf6564d02
f
2026-04-30 13:30:04 +02:00
Carlos Polop
c447ef1433
copyfail check
2026-04-30 12:59:09 +02:00
Carlos Polop
2d0eb60e5c
ci: merge validated windows definition PRs
2026-04-30 12:00:32 +02:00
ad0bc26fb0
chore(winpeas): update windows version vulnerability definitions
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-30 12:00:21 +02:00
Carlos Polop
96b5185cd4
ci: update windows definition bot branch reliably
2026-04-30 11:43:25 +02:00
Carlos Polop
d78acd4228
perf: download NVD feeds in parallel
2026-04-30 11:35:41 +02:00
Carlos Polop
7e16c4c635
ci: auto-merge windows definition update PRs
2026-04-30 10:59:50 +02:00
Carlos Polop
d142e0f1f8
fix: retry incomplete windows definition downloads
2026-04-30 10:38:31 +02:00
Carlos Polop
eb2c3fbfd1
ci: bound windows definition updater runtime
2026-04-30 10:32:57 +02:00
Carlos Polop
3b079e9463
ci: validate windows version definition updates
2026-04-30 10:03:59 +02:00
5676661aac
chore(winpeas): update windows version vulnerability definitions ( #631 )
...
Co-authored-by: carlospolop <17181413+carlospolop@users.noreply.github.com >
2026-04-30 10:01:29 +02:00
Théo Louis-Tisserand and GitHub
e9dc98fc9c
fix(linpeas): correct pkexec version regex pattern ( #632 )
2026-04-30 10:00:50 +02:00
1993984d21
Auto-merge PR #636 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-04-30 06:07:24 +00:00
dfc53a29f9
Auto-merge PR #635 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-04-30 05:58:03 +00:00
sammonsempes and GitHub
f8273fa13b
feat: detect PackageKit Pack2TheRoot (CVE-2026-41651) ( #634 )
2026-04-22 20:05:17 +02:00
Carlos Polop
5d4b4522ef
lhe
2026-04-17 13:15:05 +02:00
65d6e4662a
fix(linpeas): highlight writable shell binaries as 95% PE vector on merged-usr systems ( #630 )
...
The PATH-derived portion of writeVB uses `sed 's/:/$|^/g'` to turn the
colon-separated PATH into an alternation regex. This produces patterns like
`^/usr/bin$|^/sbin$|^/bin` where every entry except the last gets a trailing
`$` anchor — making it an exact match on the directory name itself rather than
a prefix match on files inside it.
On modern merged-/usr distributions (Debian 10+, Ubuntu 20.04+, Fedora 17+,
Arch) `/bin` is a symlink to `usr/bin`, so `find /` returns `/usr/bin/bash`
rather than `/bin/bash`. The pattern `^/usr/bin$` does not match
`/usr/bin/bash` (the `$` prevents it), so a writable bash binary falls through
to the lower-severity writeB coloring (plain RED) instead of the 95% PE vector
RED/YELLOW.
Add explicit patterns for the common shell interpreters and env so they are
always flagged as 95% PE vectors regardless of PATH ordering or /usr-merge
layout:
/bin/bash /usr/bin/bash
/bin/sh /usr/bin/sh
/bin/dash /usr/bin/dash
/bin/zsh /usr/bin/zsh
/usr/bin/env
Co-authored-by: s1d3r <s1d3r@users.noreply.github.com >
2026-04-12 23:44:18 +02:00
Jaime Polop and GitHub
b1a2eef8fd
Update 4_Capabilities.sh ( #629 )
2026-04-09 15:54:03 +02:00
53973a2754
chore(winpeas): update windows version vulnerability definitions ( #626 )
...
Co-authored-by: carlospolop <17181413+carlospolop@users.noreply.github.com >
2026-04-01 12:46:54 +02:00
5841e7c39d
Auto-merge PR #628 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-03-31 05:11:16 +00:00
