From 4f431a36d7f31d1286f9e79ca9dca0a289311ffb Mon Sep 17 00:00:00 2001
From: "Carlos.Martin" <carlos.martin@mettle.co.uk>
Date: Mon, 30 Aug 2021 00:46:00 +0100
Subject: [PATCH] linpeas

---
 build_lists/sensitive_files.yaml | 33 +++++++++++++++++++++++++++++++-
 linPEAS/builder/linpeas_base.sh  |  8 +++++++-
 2 files changed, 39 insertions(+), 2 deletions(-)

diff --git a/build_lists/sensitive_files.yaml b/build_lists/sensitive_files.yaml
index 6fbb882..14d32fd 100644
--- a/build_lists/sensitive_files.yaml
+++ b/build_lists/sensitive_files.yaml
@@ -310,7 +310,21 @@ search:
                 remove_path: "mysql/mysql"
                 search_in: 
                   - common
+
+  - name: MariaDB
+    value:
+        config:
+          auto_check: True
     
+          - name: "mariadb.cnf"
+            value: 
+                bad_regex: "user.*|password.*"
+                type: f
+                remove_regex: '^#'
+                remove_empty_lines: True
+                search_in: 
+                  - common
+          
           - name: "debian.cnf"
             value: 
                 bad_regex: "user.*|password.*"
@@ -319,7 +333,6 @@ search:
                 search_in: 
                   - common
 
-
   
   - name: PostgreSQL
     value:
@@ -1838,6 +1851,24 @@ search:
                 type: f
                 search_in: 
                   - common
+  
+  - name: Postfix
+    value:
+        config:
+          auto_check: True
+
+        files:
+          - name: "postfix"
+            value: 
+                files:
+                  - name: "master.cf"
+                    value:
+                        bad_regex: "user=|argv="
+                        remove_empty_lines: True
+                        line_grep: '"user="'
+                type: d
+                search_in: 
+                  - common
 
   - name: CloudFlare
     value:
diff --git a/linPEAS/builder/linpeas_base.sh b/linPEAS/builder/linpeas_base.sh
index 7aeb726..a2ed43a 100755
--- a/linPEAS/builder/linpeas_base.sh
+++ b/linPEAS/builder/linpeas_base.sh
@@ -407,7 +407,7 @@ if [ $? -ne 0 ] ; then
 fi
 
 writeB="00-header|10-help-text|50-motd-news|80-esm|91-release-upgrade|\.sh$|\./|/authorized_keys|/bin/|/boot/|/etc/apache2/apache2.conf|/etc/apache2/httpd.conf|/etc/hosts.allow|/etc/hosts.deny|/etc/httpd/conf/httpd.conf|/etc/httpd/httpd.conf|/etc/inetd.conf|/etc/incron.conf|/etc/login.defs|/etc/logrotate.d/|/etc/modprobe.d/|/etc/pam.d/|/etc/php.*/fpm/pool.d/|/etc/php/.*/fpm/pool.d/|/etc/rsyslog.d/|/etc/skel/|/etc/sysconfig/network-scripts/|/etc/sysctl.conf|/etc/sysctl.d/|/etc/uwsgi/apps-enabled/|/etc/xinetd.conf|/etc/xinetd.d/|/etc/|/home//|/lib/|/log/|/mnt/|/root|/sys/|/usr/bin|/usr/games|/usr/lib|/usr/local/bin|/usr/local/games|/usr/local/sbin|/usr/sbin|/sbin/|/var/log/|\.timer$|\.service$|.socket$"
-writeVB="/etc/anacrontab|/etc/bash.bashrc|/etc/bash_completion|/etc/bash_completion.d/|/etc/cron|/etc/environment|/etc/environment.d/|/etc/group|/etc/incron.d/|/etc/init|/etc/ld.so.conf.d/|/etc/master.passwd|/etc/passwd|/etc/profile.d/|/etc/profile|/etc/rc.d|/etc/shadow|/etc/skey/|/etc/sudoers|/etc/sudoers.d/|/etc/supervisor/conf.d/|/etc/supervisor/supervisord.conf|/etc/systemd|/etc/sys|/lib/systemd|/etc/update-motd.d/|/root/.ssh/|/run/systemd|/usr/lib/cron/tabs/|/usr/lib/systemd|/systemd/system|/var/db/yubikey/|/var/spool/anacron|/var/spool/cron/crontabs|"$(echo $PATH 2>/dev/null | sed 's/:\.:/:/g' | sed 's/:\.$//g' | sed 's/^\.://g' | sed 's/:/$|^/g') #Add Path but remove simple dot in PATH
+writeVB="/etc/anacrontab|/etc/apt/apt.conf.d|/etc/bash.bashrc|/etc/bash_completion|/etc/bash_completion.d/|/etc/cron|/etc/environment|/etc/environment.d/|/etc/group|/etc/incron.d/|/etc/init|/etc/ld.so.conf.d/|/etc/master.passwd|/etc/passwd|/etc/profile.d/|/etc/profile|/etc/rc.d|/etc/shadow|/etc/skey/|/etc/sudoers|/etc/sudoers.d/|/etc/supervisor/conf.d/|/etc/supervisor/supervisord.conf|/etc/systemd|/etc/sys|/lib/systemd|/etc/update-motd.d/|/root/.ssh/|/run/systemd|/usr/lib/cron/tabs/|/usr/lib/systemd|/systemd/system|/var/db/yubikey/|/var/spool/anacron|/var/spool/cron/crontabs|"$(echo $PATH 2>/dev/null | sed 's/:\.:/:/g' | sed 's/:\.$//g' | sed 's/^\.://g' | sed 's/:/$|^/g') #Add Path but remove simple dot in PATH
 
 if [ "$MACPEAS" ]; then
   sh_usrs="ImPoSSssSiBlEee"
@@ -2186,6 +2186,8 @@ if echo $CHECKS | grep -q SofI; then
   fi
   echo ""
 
+  peass{MariaDB}
+
   peass{PostgreSQL}
 
   #-- SI) PostgreSQL brute
@@ -2623,10 +2625,14 @@ if echo $CHECKS | grep -q SofI; then
   grep -Ri "passwd" /etc/pam.d/ 2>/dev/null | grep -v ":#" | sed "s,passwd,${SED_RED},"
   echo ""
 
+
+
   peass{SNMP}
 
   peass{Pypirc}
 
+  peass{Postfix}
+
   peass{Ldaprc}
 
   peass{Env}