From 86bf58f45c2e01c1bca63064c39ed4aa6d7c4265 Mon Sep 17 00:00:00 2001 From: makikvues Date: Tue, 2 Feb 2021 15:58:22 +0100 Subject: [PATCH] - fixed compilation symbols for all releases / configurations - added Slack check --- .../winPEAS/KnownFileCreds/Slack/Slack.cs | 55 +++++++++++++++++++ winPEAS/winPEASexe/winPEAS/winPEAS.csproj | 15 +++-- 2 files changed, 62 insertions(+), 8 deletions(-) create mode 100644 winPEAS/winPEASexe/winPEAS/KnownFileCreds/Slack/Slack.cs diff --git a/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Slack/Slack.cs b/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Slack/Slack.cs new file mode 100644 index 0000000..592ef30 --- /dev/null +++ b/winPEAS/winPEASexe/winPEAS/KnownFileCreds/Slack/Slack.cs @@ -0,0 +1,55 @@ +using System; +using System.IO; +using winPEAS.Helpers; +using winPEAS.Info.UserInfo; + +namespace winPEAS.KnownFileCreds.Slack +{ + internal static class Slack + { + const string SlackBasePath = @"AppData\Roaming\Slack\"; + + internal static void PrintInfo() + { + Beaprint.MainPrint("Slack files & directories"); + + Beaprint.ColorPrint(" note: check manually if something is found", Beaprint.YELLOW); + + var userDirs = User.GetUsersFolders(); + + foreach (var userDir in userDirs) + { + try + { + var userSlackDir = Path.Combine(userDir, SlackBasePath); + + if (Directory.Exists(userSlackDir)) + { + Beaprint.BadPrint($" Directory: {userSlackDir}"); + + var userSlackCookiesFile = Path.Combine(userSlackDir, "Cookies"); + if (File.Exists(userSlackCookiesFile)) + { + Beaprint.BadPrint($" File: {userSlackCookiesFile}"); + } + + var userSlackWorkspacesPath = Path.Combine(userSlackDir, @"storage\slack-workspaces"); + if (File.Exists(userSlackWorkspacesPath)) + { + Beaprint.BadPrint($" File: {userSlackWorkspacesPath}"); + } + + var userSlackDownloadsPath = Path.Combine(userSlackDir, @"storage\slack-downloads"); + if (File.Exists(userSlackDownloadsPath)) + { + Beaprint.BadPrint($" File: {userSlackDownloadsPath}"); + } + } + } + catch (Exception) + { + } + } + } + } +} diff --git a/winPEAS/winPEASexe/winPEAS/winPEAS.csproj b/winPEAS/winPEASexe/winPEAS/winPEAS.csproj index 59f2360..b589a39 100755 --- a/winPEAS/winPEASexe/winPEAS/winPEAS.csproj +++ b/winPEAS/winPEASexe/winPEAS/winPEAS.csproj @@ -21,7 +21,7 @@ full false bin\Debug\ - DEBUG;TRACE + TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF prompt 4 false @@ -33,7 +33,7 @@ pdbonly true bin\Release\ - TRACE + TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF prompt 4 false @@ -47,7 +47,7 @@ true bin\x64\Debug\ - TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF + TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF full AnyCPU 8.0 @@ -59,7 +59,7 @@ bin\x64\Release\ - TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF + TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF true pdbonly x64 @@ -72,7 +72,7 @@ true bin\x86\Debug\ - DEBUG;TRACE + TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF full x86 8.0 @@ -83,7 +83,7 @@ bin\x86\Release\ - TRACE + TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF true pdbonly x86 @@ -285,8 +285,6 @@ - - @@ -456,6 +454,7 @@ +