SirBroccoli
8aa05e13a4
Merge branch 'master' into update_PEASS-winpeas-SOAPwn__Pwning__NET_Framework_Applic_20251211_184735
2026-01-17 15:27:28 +01:00
Carlos Polop
4559fd09ea
Fix SOAP service enumeration yield in try/catch
2026-01-17 15:25:23 +01:00
SirBroccoli
4f8a3b3f25
Merge pull request #531 from peass-ng/update_PEASS-winpeas-pipetap___A_Windows_Named_Pipe_Multi_20251209_013140
...
[WINPEAS] Add privilege escalation check: pipetap – A Windows Named Pipe Multi-too...
2026-01-17 15:24:20 +01:00
Carlos Polop
0ed7a39a7d
Fix unassigned out vars in OEM pipe check
2026-01-17 15:21:50 +01:00
SirBroccoli
974cfe028f
Merge pull request #533 from peass-ng/update_PEASS-winpeas-Cracking_ValleyRAT__From_Builder_Sec_20251210_185002
...
[WINPEAS] Add privilege escalation check: Cracking ValleyRAT From Builder Secrets ...
2026-01-17 15:20:38 +01:00
SirBroccoli
f627e80a1b
Merge pull request #528 from peass-ng/update_PEASS-winpeas-LDAP_BOF_Collection___In_Memory_LDAP_20251207_013625
...
[WINPEAS] Add privilege escalation check: LDAP BOF Collection – In‑Memory LDAP Too...
2026-01-17 15:15:36 +01:00
Carlos Polop
a83d33d409
Merge branch 'master' into update_PEASS-winpeas-LDAP_BOF_Collection___In_Memory_LDAP_20251207_013625
2026-01-17 13:36:53 +01:00
Carlos Polop
1cdd473d79
Merge branch 'master' into update_PEASS-winpeas-Pwning_ASUS_DriverHub__MSI_Center__A_20251207_130236
2026-01-17 13:36:49 +01:00
Carlos Polop
0e29450869
Merge branch 'master' into update_PEASS-winpeas-pipetap___A_Windows_Named_Pipe_Multi_20251209_013140
2026-01-17 13:36:45 +01:00
Carlos Polop
efe9c1625f
Merge branch 'master' into update_PEASS-winpeas-Cracking_ValleyRAT__From_Builder_Sec_20251210_185002
2026-01-17 13:36:41 +01:00
Carlos Polop
4255330728
Merge branch 'master' into update_PEASS-winpeas-SOAPwn__Pwning__NET_Framework_Applic_20251211_184735
2026-01-17 13:36:38 +01:00
Carlos Polop
8f928f8c5d
Merge branch 'master' into update_PEASS-linpeas-HTB_WhiteRabbit__n8n_HMAC_Forgery__S_20251213_183617
2026-01-17 13:36:34 +01:00
Carlos Polop
0e8959a6db
Merge branch 'master' into update_PEASS-winpeas-Inside_Ink_Dragon__Revealing_the_Rel_20251216_185841
2026-01-17 13:36:30 +01:00
Carlos Polop
ea787df91c
Merge branch 'master' into update_PEASS-winpeas-Windows_Exploitation_Technique__Ampl_20251217_012647
2026-01-17 13:36:26 +01:00
Carlos Polop
c14f9aeb30
Merge branch 'master' into update_PEASS-winpeas-The_Windows_Registry_Adventure__Part_20251217_014635
2026-01-17 13:36:22 +01:00
Carlos Polop
a86dedb553
Merge branch 'master' into update_PEASS-linpeas-From_Chrome_Renderer_Code_Execution__20251217_020557
2026-01-17 13:36:18 +01:00
Carlos Polop
7e4743d9be
Merge branch 'master' into update_PEASS-linpeas-CVE-2025-38352___In-the-wild_Android_20251222_130932
2026-01-17 13:36:10 +01:00
Carlos Polop
14aa117a0e
Merge branch 'master' into update_PEASS-winpeas-Kerberoasting__Low-Tech__High-Impact_20251229_013424
2026-01-17 13:36:06 +01:00
Carlos Polop
7016e5a0b4
Merge branch 'master' into update_PEASS-linpeas-ECS_on_EC2__Covering_Gaps_in_IMDS_Ha_20251229_015718
2026-01-17 13:36:02 +01:00
Carlos Polop
2046d18e5d
chore: trigger CI
2026-01-16 18:17:44 +01:00
Carlos Polop
7a5aa8dcae
chore: trigger CI
2026-01-16 18:17:40 +01:00
Carlos Polop
34d0f18aad
chore: trigger CI
2026-01-16 18:17:37 +01:00
Carlos Polop
b66eebcc3d
chore: trigger CI
2026-01-16 18:17:33 +01:00
Carlos Polop
49644a9813
chore: trigger CI
2026-01-16 18:17:29 +01:00
Carlos Polop
35eb4f5be7
chore: trigger CI
2026-01-16 18:17:25 +01:00
Carlos Polop
13656ba172
chore: trigger CI
2026-01-16 18:17:21 +01:00
Carlos Polop
8c043b6164
chore: trigger CI
2026-01-16 18:17:18 +01:00
Carlos Polop
aca58f36b9
chore: trigger CI
2026-01-16 18:17:14 +01:00
Carlos Polop
dc7ce70104
chore: trigger CI
2026-01-16 18:17:10 +01:00
Carlos Polop
a5114ef5dd
chore: trigger CI
2026-01-16 18:17:02 +01:00
Carlos Polop
ff41d5b0e7
chore: trigger CI
2026-01-16 18:16:58 +01:00
Carlos Polop
fa58c6688b
chore: trigger CI
2026-01-16 18:16:54 +01:00
Carlos Polop
2f9115f97d
chore: trigger CI
2026-01-16 18:15:24 +01:00
Carlos Polop
3aa04a53fc
chore: trigger CI
2026-01-16 18:15:20 +01:00
Carlos Polop
373ed3cce2
chore: trigger CI
2026-01-16 18:15:17 +01:00
Carlos Polop
8eec7cf7f9
chore: trigger CI
2026-01-16 18:15:13 +01:00
Carlos Polop
79d53de4cf
chore: trigger CI
2026-01-16 18:15:09 +01:00
Carlos Polop
3a89398e39
chore: trigger CI
2026-01-16 18:15:05 +01:00
Carlos Polop
1d4b748cbc
Fix builder GTFOBins parsing and protections metadata
2026-01-16 18:07:04 +01:00
Carlos Polop
69371f825e
Fix GTFOBins list fetch for linpeas builder
2026-01-16 18:01:40 +01:00
Carlos Polop
72dbd9ef28
Fix PR tests Go setup and update linpeas parts
2026-01-16 17:56:34 +01:00
SirBroccoli
32e9bf657a
Merge pull request #537 from Apursuit/fix-busybox-su-false-positive
...
Fix `su` bruteforce false positives on BusyBox systems (bbsuid)
2026-01-16 17:47:57 +01:00
SirBroccoli
d6bd661460
Merge pull request #525 from peass-ng/update_PEASS-linpeas-HTB__Era___IDORs__PHP_ssh2_exec_Wrap_20251129_184039
...
[LINPEAS] Add privilege escalation check: HTB Era – IDORs, PHP ssh2.exec Wrapper R...
2026-01-16 17:38:44 +01:00
SirBroccoli
ed6263a4b3
Merge pull request #524 from peass-ng/update_PEASS-linpeas-Metasploit_Wrap-Up_11_28_2025_20251129_012934
...
[LINPEAS] Add privilege escalation check: Metasploit Wrap-Up 11/28/2025
2026-01-16 17:34:21 +01:00
SirBroccoli
93bb3e1a64
Merge pull request #523 from peass-ng/update_PEASS-winpeas-Metasploit_Wrap-Up_11_14_2025_20251127_132610
...
[WINPEAS] Add privilege escalation check: Metasploit Wrap-Up 11/14/2025
2026-01-16 17:33:05 +01:00
SirBroccoli
bf9d474cd3
Merge pull request #546 from JohannesLks/fix/ssh-key-regex-false-positive
...
fix: SSH key regex false positive with ImageMagick mime.xml
2026-01-16 17:31:28 +01:00
SirBroccoli
f856f0b588
Merge pull request #547 from JohannesLks/fix/rdcman-credentials-highlight
...
fix: Highlight stored credentials in RDCMan.settings
2026-01-14 16:57:35 +01:00
JohannesLks
9d35195c56
fix: Highlight stored credentials in RDCMan.settings
...
RDCMan.settings files can contain encrypted credentials in
credentialsProfiles sections. This change enables content
inspection to highlight:
- credentialsProfiles (indicates stored credentials)
- password (encrypted password value)
- encryptedPassword (alternative password field)
Previously, just_list_file only showed the file path without
inspecting contents, causing stored credentials to be missed.
2026-01-01 22:53:40 +01:00
JohannesLks
4abbf37cc0
fix: SSH key regex false positive with ImageMagick mime.xml
...
The regex '-----BEGIN .* PRIVATE KEY.*-----' was matching
'-----BEGIN PGP PRIVATE KEY BLOCK-----' in /etc/ImageMagick-6/mime.xml,
causing a false positive for SSH keys.
Fixed by removing the trailing .* before ----- so the regex now requires
the key header to end directly with -----, which excludes PGP key
definitions that have 'BLOCK-----' at the end.
Tested key types still detected:
- RSA PRIVATE KEY
- EC PRIVATE KEY
- OPENSSH PRIVATE KEY
- DSA PRIVATE KEY
2026-01-01 14:07:08 +01:00
HackTricks News Bot
e77867b2d3
Add linpeas privilege escalation checks from: ECS on EC2: Covering Gaps in IMDS Hardening
2025-12-29 02:02:46 +00:00
