Commit Graph

183 Commits

Author SHA1 Message Date
Carlos Polop
0682cafe08
Update linpeas_base.sh 2023-03-29 17:23:14 +02:00
KeoOp
7b9bf9cf91
Fix a bug of finding readable file in sudoers.d
Fix a bug of finding user readable file in /etc/sudoers.d
```
for filename in /etc/sudoers.d/*; do
    echo $filename  # filename is a array
done
```

```
for filename in '/etc/sudoers.d/*'; do
    echo $filename  # filename is a single long string
done
```
2023-03-08 16:37:32 +08:00
Al Longley
aa69a494b4 Check "doas.conf" based on binary existence, not config 2022-12-31 18:43:14 +11:00
Carlos Polop
a4b226c16e
Update linpeas_base.sh 2022-12-31 00:58:00 +01:00
Arnim Rupp
0ab4a65bab Update 1_system_information.sh
Fix false positive, Ubuntu fixed it one day earlier:

policykit-1 (0.105-20ubuntu0.18.04.6) bionic-security; urgency=medium

  * SECURITY UPDATE: Local Privilege Escalation in pkexec
    - debian/patches/CVE-2021-4034.patch: properly handle command-line
      arguments in src/programs/pkcheck.c, src/programs/pkexec.c.
    - CVE-2021-4034

 -- Marc Deslauriers <email address hidden>  Wed, 12 Jan 2022 07:34:00 -0500
2022-11-21 15:17:28 +01:00
Carlos Polop
940b4bc791
Update 2_container.sh 2022-09-30 13:48:06 +02:00
lu-ka
cb3e62a3ff added CVE-2022-2588; reduced color to red 2022-09-20 19:26:56 +02:00
Carlos Polop
eaac654739
Update linpeas_base.sh 2022-09-01 20:17:07 +02:00
carlospolop
8b444ba674 10k update 2022-09-01 20:08:01 +02:00
Carlos Polop
a5ca003383
Merge pull request #307 from z0ug/patch-1
Update 2_container.sh
2022-08-20 21:22:19 +02:00
z0ug
98e2318838
Update 1_system_information.sh 2022-08-20 20:01:18 +02:00
z0ug
27bc0ba5cc
Update 1_system_information.sh
Missing test makes false positive
2022-08-20 19:55:24 +02:00
z0ug
2f7d8ea583
Update 2_container.sh
Typo in release_agent_breakout2 variable name
2022-08-20 19:42:48 +02:00
Carlos Polop
5fa0e76b69
Update linpeas_base.sh 2022-07-31 00:29:32 +02:00
carlospolop
999fcff035 linpeas update 2022-07-30 12:14:53 +02:00
Carlos Polop
fa0f2e17fb
Update 7_interesting_files.sh 2022-05-11 21:13:18 +01:00
Carlos Polop
f8e0090962
Update 6_software_information.sh 2022-05-11 21:09:43 +01:00
Carlos Polop
10960f2456
Update linpeas_base.sh 2022-05-11 20:36:51 +01:00
Carlos Polop
0c9bee903a
Update 4_network_information.sh 2022-05-11 20:25:37 +01:00
Carlos Polop
7f2b14d8d7
Update 1_system_information.sh 2022-05-11 20:23:27 +01:00
Carlos Polop
0a41095a1b
Update 6_software_information.sh 2022-05-09 12:13:07 +01:00
carlospolop
585fcc33b2 change url 2022-05-01 17:43:55 +01:00
Carlos Polop
3b764452b5
Update linpeas_base.sh 2022-04-08 23:53:42 +01:00
Carlos Polop
6536042afd
Update linpeas_base.sh 2022-04-01 10:58:42 +01:00
Carlos Polop
d17e4dcca7
Update 1_system_information.sh 2022-03-28 17:31:07 +01:00
Carlos Polop
a928340752
Update 3_procs_crons_timers_srvcs_sockets.sh 2022-03-28 10:21:49 +01:00
carlospolop
b3eefad3fe check /opt 2022-03-14 16:30:44 -04:00
carlospolop
cf947f01c7 CVE-2022-0847 2022-03-10 05:34:15 -05:00
lu|ka
ee80f8d97a
Added check for CVE-2022-0847
See https://dirtypipe.cm4all.com/
2022-03-08 10:32:25 +01:00
Carlos Polop
7f3e4c440d
Update 1_system_information.sh 2022-03-07 23:33:54 +00:00
Carlos Polop
1209890aa9
Update 6_software_information.sh 2022-03-07 23:19:23 +00:00
Carlos Polop
820e12f1ed
Merge pull request #278 from carlospolop/linpeas_dev
Merge pull request #277 from julienbordet/linpeas_dev
2022-03-07 23:18:03 +00:00
Julien Bordet
073114db86 SIngle quotes in this line prevent '*' from being expanded
Right now this section for sudoers.d does not work
2022-03-08 00:11:27 +01:00
Carlos Polop
b6bf6a702a
Update 1_system_information.sh 2022-03-07 11:23:37 +00:00
Jan Roring
dd122b2f10 Fixed typo that caused linux-exploit-suggester results not being displayed 2022-03-02 17:47:14 +01:00
Carlos Polop
a89f235c43
Update linpeas_base.sh 2022-02-13 17:00:40 +00:00
secnigma
dc7c9db7dd
Improved CVE-2021-3560 Check
* Swapped `yum ` for `rpm ` for improved compatibility 
* Added known vulnerable version of Polkit
2022-02-11 13:23:50 -05:00
Carlos Polop
48ff8b061b
Update 1_system_information.sh 2022-02-09 12:02:26 +00:00
Carlos Polop
0a4df51b06
Update 1_system_information.sh 2022-02-05 19:56:14 +00:00
Kevin Pham
52c2a1e11b
fix typo
fix typo
2022-02-02 21:32:43 -08:00
Kevin Pham
f3495c48e9
Update 1_system_information.sh
More robust implementation of pkexec binary modification time check with integer comparison instead of date regex grep.

1642035600 == Thursday, January 13, 2022 1:00:00 AM
Which is when it was first patched. We have to check this way because the polkit version number is the same, patched & unpatched.
2022-02-02 21:30:43 -08:00
Carlos Polop
db89a779ad
Update 1_system_information.sh 2022-02-01 16:21:36 +00:00
Carlos Polop
77cc22a657
Update 1_system_information.sh 2022-01-31 13:21:10 +00:00
Carlos Polop
b9c8df71c5
Merge pull request #260 from carlospolop/linpeas_dev
Update 5_users_information.sh
2022-01-16 17:19:35 +00:00
Carlos Polop
c53425d4bc
Update 5_users_information.sh 2022-01-16 12:19:27 +00:00
Peter Melniček
cb81dbf02f
Update 3_procs_crons_timers_srvcs_sockets.sh 2022-01-09 17:55:39 +01:00
carlospolop
07a2db8553 color correction 2021-12-31 05:50:45 -05:00
carlospolop
e81069ea0a color correction 2021-12-31 05:48:59 -05:00
carlospolop
64458b5947 checks 2021-12-29 08:26:13 -05:00
carlospolop
bc328b1163 log4j 2021-12-23 20:41:15 -05:00
carlospolop
84524dfac5 log4j 2021-12-23 20:38:39 -05:00
carlospolop
1edcf4e28d kubelet 2021-12-23 15:06:05 -05:00
carlospolop
4ca310d66d kubelet 2021-12-23 08:11:52 -05:00
carlospolop
78153444ef more 2021-12-22 10:28:39 -05:00
carlospolop
b65b24e20c regexes 2021-12-20 05:05:02 -05:00
carlospolop
6d70913b28 regexes 2021-12-19 18:03:02 -05:00
carlospolop
dc8fd3a6b1 search regexes 2021-12-19 17:56:21 -05:00
carlospolop
d30c6ca63a search regexes 2021-12-19 17:54:29 -05:00
carlospolop
c731f6ebe6 fix 2021-12-19 13:17:45 -05:00
carlospolop
6c39d33b7b linpeas fixes 2021-12-19 12:47:50 -05:00
carlospolop
35cfa99ad4 more checks 2021-12-19 10:41:39 -05:00
carlospolop
87fe48a900 more_checks 2021-12-19 08:31:53 -05:00
carlospolop
4d67bbc32d fix 2021-12-18 16:58:56 -05:00
carlospolop
b5bb7242c9 separated linpeas 2021-12-18 14:48:01 -05:00
carlospolop
5b236b3588 linpeas 2021-12-07 07:19:53 -05:00
carlospolop
5d195b8934 mount impr 2021-11-17 15:58:13 -05:00
Carlos Polop
83909f7fce
Update linpeas_base.sh 2021-11-10 22:18:56 +00:00
carlospolop
d9df84d889 not use () in titles 2021-11-10 05:55:18 -05:00
carlospolop
10f132f292 update 2021-11-02 19:29:54 -04:00
carlospolop
713cef277d fix fi 2021-10-28 05:29:54 -04:00
carlospolop
c7a98ee914 if root no sockets 2021-10-27 19:18:46 -04:00
carlospolop
8ccf553b5b kerberos 2021-10-27 11:59:59 -04:00
Carlos Polop
220ee4330e check broken links 2021-10-24 07:37:14 -04:00
Carlos Polop
93fd84a1d0 root check 2021-10-24 07:04:37 -04:00
Carlos Polop
1ac6bc1432 imprv 2021-10-21 09:25:40 -04:00
Carlos Polop
8ce392c4ae impr 2021-10-21 08:52:42 -04:00
Carlos Polop
57cf17c4c0 imprv 2021-10-21 08:43:45 -04:00
Carlos Polop
6e4e60e1e5 up 2021-10-10 20:01:20 -04:00
Carlos Polop
fa1ddfe1f1 linpeas 2021-09-27 15:28:18 -04:00
Carlos Polop
a7362d5968 fixes and improvements 2021-09-26 18:35:25 -04:00
Martin Monerjan
73b5798dc6 Changed LD_LIBRARY_PATH purge to linpeas_base.sh 2021-09-24 14:06:27 +02:00
Carlos Polop
b3ed596ca6 fix ping auto-discovery 2021-09-20 10:23:48 -04:00
Konrad Gräfe
e073dbaeb0 linpeass: Fix SUID strings analysis
Signed-off-by: Konrad Gräfe <kgraefe@paktolos.net>
2021-09-14 10:55:35 +02:00
Carlos Polop
015ffa80b7 auto scan network 2021-09-13 09:11:07 -04:00
Carlos Polop
bb8e09df71 fixes 2021-09-13 06:54:55 -04:00
Carlos Polop
9a9395b7ba fixes 2021-09-13 06:46:30 -04:00
Carlos Polop
c36a2b05d2 improve containers 2021-09-07 19:03:51 -04:00
Carlos.Martin
4f431a36d7 linpeas 2021-08-30 00:46:00 +01:00
Carlos.Martin
7e5814e9d5 sentry files 2021-08-28 18:16:24 +01:00
Carlos.Martin
a90bb41704 linpeas 2021-08-27 14:34:04 +01:00
Carlos.Martin
e335954838 linpeas 2021-08-27 01:16:45 +01:00
Carlos.Martin
48812b9fe3 linpeas imprv 2021-08-14 18:52:47 +01:00
Carlos.Martin
958eea252d vuln pkgs 2021-08-13 10:00:13 +01:00
Carlos.Martin
caa042d0ab Merge branch 'master' into linpeas_dev 2021-08-11 00:46:44 +01:00
Carlos.Martin
151708dcce linpeas 2021-08-11 00:45:29 +01:00
Fabian Dellwing
7bcf08484d
fix cut syntax 2021-08-09 12:25:46 +02:00
Carlos.Martin
51f980b1a2 linpeas 2021-08-09 09:44:39 +01:00
Carlos.Martin
14ebbdb3e2 linpeas 2021-08-08 17:20:45 +01:00
Carlos.Martin
87c433524c linpeas su brute fix 2021-08-03 11:11:31 +01:00
Carlos.Martin
4273085428 linpeas fixes 2021-08-01 11:41:43 +01:00