Merge pull request #499 from peass-ng/update_PEASS-linpeas-HTB_Environment__Laravel_env_overrid_20250907_013120

[LINPEAS] Add privilege escalation check: HTB Environment Laravel env override (CV...
Merge pull request #506 from tropkal/tropkal-patch-1
2026-01-03 00:30:44 -08:00 · 2025-10-04 10:29:32 +02:00 · 2025-10-04 10:29:01 +02:00 · 2025-10-04 08:43:00 +02:00 · 2025-10-04 09:08:37 +03:00 · 2025-09-07 01:38:03 +00:00
3 changed files with 17 additions and 18 deletions
--- a/build_lists/sensitive_files.yaml
+++ b/build_lists/sensitive_files.yaml
@@ -895,6 +895,14 @@ search:
                type: f
                search_in: 
                  - common
+          
+          - name: "credentials.tfrc.json"
+            value: 
+                type: f
+                bad_regex: ".*"
+                search_in:
+                  - common
+                  

  - name: Racoon
    value:
@@ -1267,20 +1275,6 @@ search:
                search_in:
                  - common
  
-
-  - name: Terraform
-    value:
-        config:
-          auto_check: True
-    
-        files:
-          - name: "credentials.tfrc.json"
-            value: 
-                type: f
-                bad_regex: ".*"
-                search_in:
-                  - common
-  
  - name: Cloud Credentials
    value:
        config:
@@ -2073,6 +2067,11 @@ search:
                type: f
                search_in: 
                  - common
+          - name: "private-keys-v1.d/*.key"
+            value: 
+                type: f
+                search_in: 
+                  - common

          - name: "*.gnupg"
            value: 
--- a/linPEAS/builder/linpeas_parts/variables/sudoVB1.sh
+++ b/linPEAS/builder/linpeas_parts/variables/sudoVB1.sh
@@ -13,5 +13,5 @@
 # Small linpeas: 1


-sudoVB1=" \*|env_keep\W*\+=.*LD_PRELOAD|env_keep\W*\+=.*LD_LIBRARY_PATH|peass{SUDOVB1_HERE}"
-sudoVB2="peass{SUDOVB2_HERE}"
+sudoVB1=" \*|env_keep\W*\+=.*LD_PRELOAD|env_keep\W*\+=.*LD_LIBRARY_PATH|env_keep\W*\+=.*BASH_ENV|env_keep\W*\+=.* ENV|peass{SUDOVB1_HERE}"
+sudoVB2="peass{SUDOVB2_HERE}"
--- a/linPEAS/builder/linpeas_parts/variables/sudovB.sh
+++ b/linPEAS/builder/linpeas_parts/variables/sudovB.sh
@@ -1,7 +1,7 @@
 # Title: Variables - sudovB
 # ID: sudovB
 # Author: Carlos Polop
-# Last Update: 22-08-2023
+# Last Update: 04-10-2025
 # Description: Sudo version bad regex
 # License: GNU GPL
 # Version: 1.0
@@ -13,4 +13,4 @@
 # Small linpeas: 1


-sudovB="[01].[012345678].[0-9]+|1.9.[01234][^0-9]|1.9.[01234]$|1.9.5p1"
+sudovB="[01].[012345678].[0-9]+|1.9.[01234][^0-9]|1.9.[01234]$|1.9.5p1|1\.9\.[6-9]|1\.9\.1[0-7]"
Author	SHA1	Message	Date
SirBroccoli	7b36014699	Merge pull request #499 from peass-ng/update_PEASS-linpeas-HTB_Environment__Laravel_env_overrid_20250907_013120 [LINPEAS] Add privilege escalation check: HTB Environment Laravel env override (CV...	2025-10-04 10:29:32 +02:00
SirBroccoli	6fe8304783	Merge pull request #506 from tropkal/tropkal-patch-1 Update the regex for the sudo version	2025-10-04 10:29:01 +02:00
tropkal	262feb9896	Updated the sudo regex to catch 2 more CVE's.	2025-10-04 08:43:00 +02:00
tropkal	40cf08af85	Update sudovB.sh Modified the regex that checks for vulnerable sudo versions to include sudo version 1.9.17 (not including 1.9.17p1), which is vulnerable to CVE-2025-32463 (https://www.exploit-db.com/exploits/52352).	2025-10-04 09:08:37 +03:00
HackTricks News Bot	4b3f4aa19e	Add linpeas privilege escalation checks from: HTB Environment: Laravel env override (CVE‑2024‑52301) → LFM upload RCE (CVE‑202	2025-09-07 01:38:03 +00:00
carlospolop	7c7884fb72	f tf	2025-09-05 01:04:53 +02:00