SirBroccoli
64a6bb0ff6
test: capture help output
2025-06-06 00:01:37 +02:00
SirBroccoli
c3a93a57fe
Merge pull request #473 from Signum21/master
...
Fix IdentityNotMappedException in Vulnerable Leaked Handlers
2025-05-31 22:36:49 +02:00
Signum21
f62d9fc550
Fix System.Security.Principal.IdentityNotMappedException in Vulnerable Leaked Handlers
2025-05-31 04:56:14 +02:00
SirBroccoli
11e9b8dde6
Merge pull request #472 from Jack-Vaughn/NoEnvVars-Update
...
Add 4 noisy environment variables to NoEnvVars.sh
2025-05-26 23:57:40 +02:00
Jack Vaughn
b9a9ad5ddf
Add 4 noisy and useless environment variables to NoEnvVars.sh
...
These variables (^PATH=|^INVOCATION_ID=|^WATCHDOG_PID=|^LISTEN_PID=) frequently appear across processes
on busy systems (10+ each on tested system) and produce a large volume of irrelevant output
2025-05-25 21:32:51 -04:00
carlospolop
88f08a405e
l
2025-05-26 02:55:07 +02:00
SirBroccoli
322792c4ec
Merge pull request #471 from Jack-Vaughn/environ-check
...
Add module to check for sensitive environment variables via /proc/*/environ
2025-05-26 02:33:43 +02:00
Jack
c150e63b52
This module scans /proc/*/environ for potentially sensitive environment variables on Linux systems.
...
It targets common keywords like token, password, secret, AWS, API, etc.
Uses 'tr' instead of 'strings' to improve compatibility in minimal environments like containers.
The check is skipped entirely on MacPEAS.
2025-05-25 12:55:34 -04:00
carlospolop
7b8dcfbe8d
f
2025-05-25 08:17:07 +02:00
carlospolop
aac3667247
f l
2025-05-25 08:15:48 +02:00
carlospolop
64ab193d25
f linpeas
2025-05-25 07:05:48 +02:00
carlospolop
aab8241ede
f
2025-05-25 02:21:39 +02:00
carlospolop
65b98d11ac
only print errors when relevant
2025-05-25 02:10:07 +02:00
carlospolop
1e72dbeb76
impr winpeas networking checks
2025-05-25 01:46:30 +02:00
carlospolop
c9282b4bdb
fix winpeas?
2025-05-25 01:37:03 +02:00
carlospolop
b91334e5b3
fix
2025-05-24 23:37:00 +02:00
carlospolop
b7bc20a027
improvement
2025-05-24 23:31:12 +02:00
carlospolop
4fbe6ffd79
winpeas networkinfo test ci/cd
2025-05-24 23:16:31 +02:00
carlospolop
c288f3a810
fw
2025-05-24 23:05:13 +02:00
carlospolop
f3e29a509f
fix winpeas
2025-05-24 23:02:18 +02:00
carlospolop
c29fc553b5
Merge branch 'master' of github.com:peass-ng/PEASS-ng
2025-05-24 08:30:12 +02:00
carlospolop
1e7a90d29f
cursor rewrite + network checks
2025-05-24 08:29:47 +02:00
SirBroccoli
5a5d44f393
Merge pull request #470 from Signum21/master
...
WinPeas: Differentiate between Allow ACLs and Deny ACLs
2025-05-21 07:06:46 +02:00
Signum21
368f0af794
WinPeas: Differentiate between Allow ACLs and Deny ACLs
...
Works for files, folders, registry keys and named pipes
2025-05-21 03:33:33 +02:00
carlospolop
604580adbd
more
2025-05-19 06:36:39 +02:00
carlospolop
9820c18697
Cursor improvements parts 1 and 2
2025-05-19 06:36:35 +02:00
carlospolop
ea9b930fdb
fix capabilities module
2025-05-18 14:33:02 +02:00
SirBroccoli
dae0f7a533
Merge pull request #468 from ThatTotallyRealMyth/ThatTotallyRealMyth-4_capEdit-1
...
Update 4_Capabilities.sh: Fix capability decoding to prevent shell breaking output from shell/process capabiltiy checking.
2025-05-18 14:19:28 +02:00
carlospolop
3a317cc5c4
fix ec2
2025-05-18 14:17:15 +02:00
ThatTotallyRealMyth
01bf3a4ef8
Update 4_Capabilities.sh: Fix capability decoding to prevent sequence number output
...
Testing confirmed that certain capability values (specifically ffffffffffffffff) cause memory allocation errors in capsh:
"xrealloc: cannot allocate 716488832 bytes (57344 bytes allocated)"
These memory errors were being propagated into the output, causing the long sequence of numbers. The fix prevents these errors from affecting the script's output.
2025-05-18 16:05:01 +10:00
carlospolop
ef28ef7a33
fix linpeas not getting EC2 metadata
2025-05-18 04:58:22 +02:00
carlospolop
58c107df40
fix kill?
2025-05-18 04:46:19 +02:00
carlospolop
63c090059b
kill frozen external binaries
2025-05-18 01:20:32 +02:00
carlospolop
4c16f72ae2
fix
2025-05-17 16:09:36 +02:00
carlospolop
85684b39ad
add timeout 120 when executing external binary
2025-05-17 16:06:35 +02:00
SirBroccoli
c0b171a5c1
Update peass.rb
2025-05-16 22:25:10 +02:00
SirBroccoli
ddc2d95cb4
Update peass.rb
2025-05-16 15:53:43 +02:00
Carlos Polop
97ae1d2e3b
Merge branch 'master' of github.com:peass-ng/PEASS-ng
2025-04-24 04:20:22 +02:00
Carlos Polop
3b6f0a5bdc
f
2025-04-24 04:20:19 +02:00
SirBroccoli
7008652029
Merge pull request #462 from jahway603/jahway603-patch-1
...
Minor URL fix
2025-03-30 19:18:52 +02:00
SirBroccoli
e5239f8c58
Merge pull request #461 from Signum21/master
...
Handle path access denied
2025-03-30 19:18:34 +02:00
SirBroccoli
b2c03246d2
Merge pull request #459 from gildasio/master
...
Set grep to show filename that contains passwords
2025-03-30 19:18:13 +02:00
SirBroccoli
f0686d491b
Merge pull request #464 from spkal01/master
...
Rework PEASS url logic for the metasploit module
2025-03-29 21:56:35 +01:00
spkal01
99e8eb7813
Rework PEASS url logic for the metasploit module
2025-03-29 21:45:58 +02:00
Carlos Polop
46193aa0d5
fix
2025-03-20 05:13:54 +01:00
Carlos Polop
62022abc47
impr winpeas
2025-03-20 05:02:34 +01:00
jahway603
d63e737b63
Minor URL fix
2025-03-18 12:33:50 -04:00
Signum21
0b041ad694
Handle path access denied
...
The program crashes when trying to access a path that is not allowed.
An exampe of this can be found on the latest HackTheBox machine (TheFrizz) where the starting user can't access the path C:\Users
2025-03-16 05:43:48 +01:00
Gildasio Junior
8ea67f3cc2
Set grep to show filename that contains passwords
...
This way one can identify which file contains the relevant information,
eg:
/var/log/responder/Poisoners-Session.log:2025-02-09 21:12:12,701 - [*] Skipping previously captured cleartext password for donald
/var/log/responder/Responder-Session.log:11/02/2025 12:33:11 PM - [HTTP] Basic Password : bambam
/var/log/responder/Responder-Session.log:11/02/2025 12:36:12 PM - [HTTP] Basic Password : estrella
2025-02-28 19:54:44 -03:00
Carlos Polop
ce5cb1ad9c
fix
2025-02-24 00:21:09 +01:00
