Commit Graph
1689 Commits
Author SHA1 Message Date
SirBroccoliandGitHub e5239f8c58 Merge pull request #461 from Signum21/master
Handle path access denied
20250330-549cb967
2025-03-30 19:18:34 +02:00
SirBroccoliandGitHub b2c03246d2 Merge pull request #459 from gildasio/master
Set grep to show filename that contains passwords
20250330-9284b167
2025-03-30 19:18:13 +02:00
SirBroccoliandGitHub f0686d491b Merge pull request #464 from spkal01/master
Rework PEASS url logic for the metasploit module
20250329-2151d069
2025-03-29 21:56:35 +01:00
spkal01 99e8eb7813 Rework PEASS url logic for the metasploit module 2025-03-29 21:45:58 +02:00
Carlos Polop 46193aa0d5 fix 20250320-91fb36a0 2025-03-20 05:13:54 +01:00
Carlos Polop 62022abc47 impr winpeas 2025-03-20 05:02:34 +01:00
Signum21andGitHub 0b041ad694 Handle path access denied
The program crashes when trying to access a path that is not allowed.
An exampe of this can be found on the latest HackTheBox machine (TheFrizz) where the starting user can't access the path C:\Users
2025-03-16 05:43:48 +01:00
Gildasio Junior 8ea67f3cc2 Set grep to show filename that contains passwords
This way one can identify which file contains the relevant information,
eg:

/var/log/responder/Poisoners-Session.log:2025-02-09 21:12:12,701 - [*] Skipping previously captured cleartext password for donald
/var/log/responder/Responder-Session.log:11/02/2025 12:33:11 PM - [HTTP] Basic Password : bambam
/var/log/responder/Responder-Session.log:11/02/2025 12:36:12 PM - [HTTP] Basic Password : estrella
2025-02-28 19:54:44 -03:00
Carlos Polop ce5cb1ad9c fix 20250301-c97fb02a 20250223-a8d560c8 2025-02-24 00:21:09 +01:00
Carlos Polop 30586c064f Merge branch 'master' of github.com:peass-ng/PEASS-ng 20250223-e389d4c2 2025-02-23 23:58:45 +01:00
Carlos Polop b82fc9ac39 improve winpeas azure env detection 2025-02-23 23:58:41 +01:00
SirBroccoliandGitHub 54818756e4 Update README.md 20250223-d952199c 2025-02-23 23:47:47 +01:00
Carlos Polop 516aafff27 fix wget 20250216-fd69e735 2025-02-16 17:36:01 +01:00
Carlos Polop 2b64ffc803 a 20250216-cab9fe42 2025-02-16 16:15:19 +01:00
Carlos Polop 9f8563c751 improve linpeas 20250215-2b75946e 2025-02-15 18:14:56 +01:00
Carlos Polop 573acee58c improve azure linpeas 20250215-d1d0adc4 2025-02-15 17:43:42 +01:00
SirBroccoliandGitHub 41e00d5618 Merge pull request #458 from DidierA/macos_echo
Fix echo -n on macOS
20250202-a3a1123d
2025-02-02 13:49:16 +01:00
SirBroccoliandGitHub 536913e7f0 Merge pull request #457 from gcorrall/fix_28_files_with_passwords
Fix 28_Files_with_passwords.sh
20250202-3118d539
2025-02-02 13:48:14 +01:00
DidierA 4d771fb1f6 Fix echo -n on macOS 2025-01-31 16:45:24 +01:00
Gary Corrall 4964033d44 Fix 28_Files_with_passwords.sh 2025-01-29 16:33:54 +00:00
Carlos Polop 092af1413d update azure files with tokens 20250201-73c8835d 20250126-41ed0f6a 2025-01-26 15:58:48 +01:00
Carlos Polop 7cd9e6f78b az tokens 20250124-6ec1269f 2025-01-25 00:40:15 +01:00
Carlos Polop 21a5ef9325 add az tokens 20250124-797af3ec 2025-01-24 19:27:57 +01:00
SirBroccoliandGitHub c3744a730b Merge pull request #453 from KatsuragiCSL/patch-1
swap ppid and pid user in "PPID belongs to a different user (not root)" test
20250113-4426d62e
2025-01-13 12:16:51 +01:00
KatsuragiCSLandGitHub 7abe31c107 swap ppid and pid user in "PPID belongs to a different user (not root)" test
Seems like it is reporting processes with ppid user root instead of not root. e.g. I see it reports "proc xyz with ppid 1 is run by user messagebus but the ppid user is root" when run in a linux box
2025-01-13 18:17:51 +08:00
Carlos Polop 3e8078f1cb fix reponse var 20250112-c19ae6c3 2025-01-12 13:23:01 +01:00
Carlos Polop abd1f3d4b5 improved support az metadata 2025-01-11 19:51:14 +01:00
Carlos Polop 7e749c50ac fix 20250110-31084f44 2025-01-10 09:33:20 +01:00
Carlos Polop 2e74ef4a2c fix id check_az_automation_acc 2025-01-10 09:23:20 +01:00
Carlos Polop bc9a368626 az automation account 2025-01-10 09:21:52 +01:00
SirBroccoliandGitHub 818dea92f3 Merge pull request #452 from JaimePolop/master
Brief description of your changes
20250106-5a706ae2
2025-01-06 19:30:32 +01:00
Jimmy 96b7bdaf91 Brief description of your changes 2025-01-06 13:55:15 +01:00
SirBroccoliandGitHub 82088b597c Merge pull request #449 from Average-Bear/master
WinPEAS.ps1 changes only -- Minor fixes, Removed Get-CimInstance Win32_product for ("Known Bad"), Remove PSCustomObject for cmdlet PSObject
20250106-2b1aea1b
2025-01-06 11:08:06 +01:00
Carlos Polop aa5f5c0e2f tested 20250101-f69feb38 20241222-e17c35a2 2024-12-22 01:28:12 +01:00
Carlos Polop d576055342 update azure apps 20241221-31286489 2024-12-21 17:49:41 +01:00
Carlos Polop a3e3e9799b fix azure apps 20241221-8c420aa6 2024-12-21 15:12:59 +01:00
Carlos Polop 2a71da4bb2 another linpeas fix 20241205-c8c0c3e5 2024-12-05 17:49:44 +01:00
Carlos Polop 1e1a8a7c86 fix linpeas 20241205-d44f1315 2024-12-05 12:00:27 +01:00
Carlos Polop 186e659080 fix builder 20241205-d6ec1557 2024-12-05 01:24:35 +01:00
Carlos Polop 3559a62d51 add more azure metadata info 20241203-6150e17b 2024-12-04 00:28:25 +01:00
Carlos Polop ae49e7fa02 fix tencent 20241203-bc5dc725 2024-12-03 19:51:16 +01:00
Carlos Polop 18f5b5ef96 f 20241203-133e6351 2024-12-03 19:49:48 +01:00
SirBroccoliandGitHub 4279b08991 Update README.md 20241203-45c91114 2024-12-03 13:05:17 +01:00
SirBroccoliandGitHub 32e3a4b776 Merge pull request #447 from darses/master
Add Windows LAPS check
20241201-e3889b61 20241129-9333c297
2024-11-29 01:48:20 +01:00
darses a150d4a022 Add Windows LAPS check to winPEAS.bat 2024-11-28 19:37:58 +01:00
Carlos Polop cdb81d7eb4 up 20241128-39ea90b5 2024-11-28 11:44:32 +01:00
Jeremy DeWittandGitHub 90442f8e0c Minor Fixes 2024-10-29 13:39:16 -05:00
Carlos Polop 6a98d46987 Merge branch 'master' of github.com:peass-ng/PEASS-ng 20241101-6f46e855 20241011-2e37ba11 2024-10-11 02:44:54 +01:00
Carlos Polop f55d20a67d fix google password sync 2024-10-11 02:44:43 +01:00
SirBroccoliandGitHub 85ab89511e Update sensitive_files.yaml 20241011-f83883c6 2024-10-11 02:56:41 +02:00