Update linpeas_base.sh

Merge pull request #341 from ZoeS17/snmp
sensitive_files.yaml(SNMP) add createUser to bad_regex
2025-12-20 22:33:15 -08:00 · 2023-03-29 17:23:14 +02:00 · 2023-03-29 17:17:28 +02:00 · 2023-03-29 17:16:34 +02:00 · 2023-03-11 11:08:20 -06:00 · 2023-03-08 16:37:32 +08:00
3 changed files with 3 additions and 3 deletions
--- a/build_lists/sensitive_files.yaml
+++ b/build_lists/sensitive_files.yaml
@@ -2123,7 +2123,7 @@ search:
        files:
          - name: "snmpd.conf"
            value: 
-                bad_regex: "rocommunity|rwcommunity|extend.*"
+                bad_regex: "rocommunity|rwcommunity|extend.*|^createUser"
                only_bad_lines: True
                type: f
                search_in: 
--- a/linPEAS/builder/linpeas_parts/6_users_information.sh
+++ b/linPEAS/builder/linpeas_parts/6_users_information.sh
@@ -68,7 +68,7 @@ fi
 if ! [ "$IAMROOT" ] && [ -w '/etc/sudoers.d/' ]; then
  echo "You can create a file in /etc/sudoers.d/ and escalate privileges" | sed -${E} "s,.*,${SED_RED_YELLOW},"
 fi
-for filename in '/etc/sudoers.d/*'; do
+for filename in /etc/sudoers.d/*; do
  if [ -r "$filename" ]; then
    echo "Sudoers file: $filename is readable" | sed -${E} "s,.*,${SED_RED},g"
    grep -Iv "^$" "$filename" | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW}," | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g" 
--- a/linPEAS/builder/linpeas_parts/linpeas_base.sh
+++ b/linPEAS/builder/linpeas_parts/linpeas_base.sh
@@ -548,7 +548,7 @@ ldsoconfdG="/lib32|/lib/x86_64-linux-gnu|/usr/lib32|/usr/lib/oracle/19.6/client6

 dbuslistG="^:1\.[0-9\.]+|com.hp.hplip|com.redhat.ifcfgrh1|com.redhat.NewPrinterNotification|com.redhat.PrinterDriversInstaller|com.redhat.RHSM1|com.redhat.RHSM1.Facts|com.redhat.tuned|com.ubuntu.LanguageSelector|com.ubuntu.SoftwareProperties|com.ubuntu.SystemService|com.ubuntu.USBCreator|com.ubuntu.WhoopsiePreferences|io.netplan.Netplan|io.snapcraft.SnapdLoginService|fi.epitest.hostap.WPASupplicant|fi.w1.wpa_supplicant1|NAME|org.blueman.Mechanism|org.bluez|org.debian.apt|org.fedoraproject.FirewallD1|org.fedoraproject.Setroubleshootd|org.fedoraproject.SetroubleshootFixit|org.fedoraproject.SetroubleshootPrivileged|org.freedesktop.Accounts|org.freedesktop.Avahi|org.freedesktop.bolt|org.freedesktop.ColorManager|org.freedesktop.DBus|org.freedesktop.DisplayManager|org.freedesktop.fwupd|org.freedesktop.GeoClue2|org.freedesktop.hostname1|org.freedesktop.import1|org.freedesktop.locale1|org.freedesktop.login1|org.freedesktop.machine1|org.freedesktop.ModemManager1|org.freedesktop.NetworkManager|org.freedesktop.network1|org.freedesktop.nm_dispatcher|org.freedesktop.PackageKit|org.freedesktop.PolicyKit1|org.freedesktop.portable1|org.freedesktop.realmd|org.freedesktop.RealtimeKit1|org.freedesktop.resolve1|org.freedesktop.systemd1|org.freedesktop.thermald|org.freedesktop.timedate1|org.freedesktop.timesync1|org.freedesktop.UDisks2|org.freedesktop.UPower|org.opensuse.CupsPkHelper.Mechanism"

-USEFUL_SOFTWARE="authbind aws base64 ctr curl doas docker fetch g++ gcc gdb kubectl lxc make nc nc.traditional ncat netcat nmap perl php ping podman python python2 python2.6 python2.7 python3 python3.6 python3.7 rkt ruby runc socat sudo wget xterm"
+USEFUL_SOFTWARE="authbind aws base64 ctr curl doas docker fetch g++ gcc gdb kubectl lxc make nc nc.traditional ncat netcat nmap perl php ping podman python python2 python2.6 python2.7 python3 python3.6 python3.7 pwsh rkt ruby runc socat sudo wget xterm"
 TIP_DOCKER_ROOTLESS="In rootless mode privilege escalation to root will not be possible."
 GREP_DOCKER_SOCK_INFOS="Architecture|OSType|Name|DockerRootDir|NCPU|OperatingSystem|KernelVersion|ServerVersion"
 GREP_DOCKER_SOCK_INFOS_IGNORE="IndexConfig"
Author	SHA1	Message	Date
Carlos Polop	0682cafe08	Update linpeas_base.sh	2023-03-29 17:23:14 +02:00
Carlos Polop	aa1f162359	Merge pull request #341 from ZoeS17/snmp sensitive_files.yaml(SNMP) add createUser to bad_regex	2023-03-29 17:17:28 +02:00
Carlos Polop	60b2e1d974	Merge pull request #340 from XHNan/patch-1 Fix a bug of finding readable files in sudoers.d	2023-03-29 17:16:34 +02:00
Zoe Kahala	eabec47c08	sensitive_files.yaml(SNMP) add createUser to bad_regex Add `createUser` to `bad_regex` as it likely contains a hardcoded password. As an example: ``` createUser bootstrap MD5 SuperSecurePassword123__ DES ``` where `SuperSecurePassword123__` is the password and `bootstrap` is the username, though I should mention the username maybe misleading here. Spec/Man-page link: [freebsd.org - snmpd.conf] [freebsd.org - snmpd.conf]: https://man.freebsd.org/cgi/man.cgi?query=snmpd.conf#:~:text=your%2D%0A%20%20%20%20%20%20%20self%20instead%3A-,createUser,-%5B%2De%09%20%20%20%20%20%20%20ENGINEID%5D%09%20%20%20%20%20%20username	2023-03-11 11:08:20 -06:00
KeoOp	7b9bf9cf91	Fix a bug of finding readable file in sudoers.d Fix a bug of finding user readable file in /etc/sudoers.d ``` for filename in /etc/sudoers.d/; do echo $filename # filename is a array done ``` ``` for filename in '/etc/sudoers.d/'; do echo $filename # filename is a single long string done ```	2023-03-08 16:37:32 +08:00