darnellkeith/PEASS-ng
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
750 Commits 14 Branches 285 Tags 63 MiB
f20102a60b
Commit Graph

750 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
makikvues
dfb0bcdc34 - updated README.md 2021-02-14 15:02:30 +01:00
makikvues
74d4b2dfe9 - updated README.md 2021-02-14 10:39:58 +01:00
makikvues
6a99882f85 - suppressing chrome decrypt credentials error 2021-02-13 17:33:15 +01:00
makikvues
1ceb041ee5 - updated PrintMcAffeSitelistFiles 
- linpeas & lolbas checks running optionally if specified
 2021-02-13 17:02:03 +01:00
makikvues
d6d7b4e0e0 - removed CMD checks 
- small cleanup
- updated PrintAppCmd
- updated AutoRuns checks
 2021-02-13 11:13:26 +01:00
makikvues
f3c7e92735 - added PrintLOLBAS 
- added PrintInternetSettings
- added PrintPowerShellSessionSettings
- added PrintNtlmSettings
- added PrintRDPSettings
 2021-02-11 22:36:39 +01:00
makikvues
49a4344730 - added PrintOffice365EndpointsSyncedByOneDrive 
- added PrintOfficeMostRecentFiles
- added PrintCurrentTenantInfo
- cleanup
 2021-02-10 22:58:18 +01:00
makikvues
df843d3825 - updated PrintWSLDistributions - running linpeas.sh in default WSL distribution 
- added PrintLSAInfo
- added PrintLocalGroupPolicy
- added PrintLocalUsers
 2021-02-09 22:51:16 +01:00
Kali
6133e624ec linpeasv3.0.4 2021-02-09 05:25:33 -05:00
Kali
f22283bd20 linpeasv3.0.3 2021-02-09 04:38:00 -05:00
Kali
f83cf6706d Merge branch 'master' of https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite 2021-02-09 04:32:06 -05:00
Kali
ffd2a659ed linpeasv3.0.3 2021-02-09 04:31:23 -05:00
makikvues
647fe190ef - added Brave browser credentials extraction 
- added PowerOnEvents
- added PrintOutlookDownloads
- added PrintAuditPoliciesInfo
- added search keywords for keepass
 2021-02-08 22:50:58 +01:00
makikvues
343b8bb96b - refactoring/cleanup 
- added .net versions check
- added PrintMappedDrivesWMI
- added PrintMicrosoftUpdatesCOM
- added PrintSystemLastShutdownTime
- added PrintCurrentUserIdleTime
- added PowerShell Core Version check
- updated ListCloudCreds
- updated GetMcAfeeSitelistFiles
- added PrintMachineAndUserCertificateFiles
 2021-02-07 23:13:14 +01:00
makikvues
839e4a79ba - rewrote Directory.Get* to Directory.Enumerate* to improve search speed 2021-02-04 21:07:56 +01:00
makikvues
2f4c58d202 - commented out CleanLists 2021-02-03 22:18:37 +01:00
makikvues
fb17429f67 - refactoring / cleanup - moved all native external methods to /Native folder/classes 
- added new event checks - Explicit Logon Events, Logon Events, PowerShell Events, Process Creation Events
- added PrintSecurityPackagesCredentials check
- added Windows Defender enumeration
 2021-02-03 21:54:20 +01:00
makikvues
cc24db3ff5 - cleanup & updates 2021-02-02 17:48:06 +01:00
makikvues
80288c568a - removed throwing exceptions in Chrome, Opera 2021-02-02 17:19:31 +01:00
makikvues
86bf58f45c - fixed compilation symbols for all releases / configurations 
- added Slack check
 2021-02-02 15:58:22 +01:00
makikvues
c2d7f1b5b0 - updates & fixes 2021-01-31 18:48:44 +01:00
makikvues
7bbe71d290 - uncommented CreateDynamicLists 2021-01-31 18:17:30 +01:00
makikvues
8a8393dcc8 - updated listening ports enumeration check - added process pid + name 2021-01-31 18:12:22 +01:00
makikvues
9a6e5d5831 - fixed namespaces 
- added CredentialGuard check
- added Named Pipes enumeration
- added Printers enumeration
- added SysMon enumeration
- added Logon Sessions enumeration
- added SuperPutty config files check
- added Oracle SQL Developer Config files check
- added AMSI providers check
- added SCCM check
- fixed output formatting
 2021-01-31 14:13:56 +01:00
makikvues
977e183068 - added saved password extraction for: Opera, Firefox, Chrome 2021-01-28 10:19:27 +01:00
Carlos Polop
a371e9dddd
Merge pull request #98 from Jab2870/bugfix 
Fix: False positive for writeable network-scripts directory
 2021-01-27 12:38:39 +01:00
Jonathan Hodgson
37a2030faf Fix: False positive for writeable network-scripts directory 
Symbolic links almost always have 777 permissions although this doesn't
mean you can change them.

This commit prevents the tool from flagging symbolic links with write
access in the /etc/sysconfig/network-scripts folder
 2021-01-27 11:27:44 +00:00
makikvues
27e8867236 - cleanup 
- fixed using on IDisposables
 2021-01-25 23:52:29 +01:00
makikvues
24754e374f - fixed missing comma 2021-01-25 22:46:53 +01:00
makikvues
23d3e1cd22 - added check PrintExecutablesInNonDefaultFoldersWithWritePermissions() 2021-01-25 22:46:14 +01:00
makikvues
2a0ab7bf77 - added search for hidden files in c:\users 2021-01-25 21:39:20 +01:00
makikvues
f5155d5eb4 - added PrintOtherUsersInterestingFiles check 
- cleanup
 2021-01-24 13:19:52 +01:00
makikvues
39c71eb4a3 - updated applocker implementation 
- added logging to text file
- updated PermissionsHelper to allow searching only for write or equivalent permissions
- optimized StaticSID2GroupName
- updated printing in PrintCredManag
 2021-01-23 16:38:35 +01:00
makikvues
4395b871d8 - updated PrintLinuxShells() - WSL checks 2021-01-22 11:41:19 +01:00
Carlos Polop
55f10da6c3
Update linpeas.sh 2021-01-22 00:42:15 +00:00
Carlos Polop
5c96254607
Merge pull request #97 from axano/patch-1 
Added log file capability
 2021-01-22 01:41:05 +01:00
Emmanouil Perselis
d587c05833
Update Program.cs 
I have added the option to write the output to a file when the parameter "log" is inserted. This is because I was not able to see the output when I was loading the exe with reflective PE injection in Powershell.
 2021-01-21 17:43:24 +01:00
makikvues
e76e097627 - refactoring & cleanup 
- updated Autorun checks
 2021-01-19 23:56:26 +01:00
makikvues
a27ad66892 - Program and Main made public 2021-01-18 23:37:55 +01:00
makikvues
9dd1fdbc95 - scheduled tasks rewrite - cleanup, excluding also Microsoft from Path; skipping failed scheduled tasks 
- added total execution time for debugging purposes
- bugfixes
- GetEverLoggedUsers() - skipping users which could not be translated
 2021-01-18 22:12:01 +01:00
makikvues
e16234b773 - refactoring & cleanup 
- TODO: first version of AppLocker implementation
- CredentialManager implementation
- added check of LsaCompatiblityLevel
- updated GetAutoRunsFolder
- updated PrintTranscriptPS
 2021-01-17 23:38:39 +01:00
makikvues
448a1aaf5b - fixed getting data from clipboard 
- fixed GetExecutableFromPath
- unified exception logging
- cleanup
 2021-01-14 23:50:19 +01:00
Carlos Polop
b8fd7a349a
Merge pull request #96 from DidierA/sed_option 
check if sed accepts -r instead of -E
 2021-01-14 12:43:23 +01:00
DidierA
dd61ed8591 check if sed accepts -r instead of -E 2021-01-14 12:09:17 +01:00
Carlos Polop
e41c819986
Merge pull request #95 from DidierA/fix-infinite-loop 
fix for infinite loop when sed does not support -E
 2021-01-14 10:26:03 +01:00
DidierA
12d68d7a80 fix for infinite loop when sed does not support -E 2021-01-14 09:59:30 +01:00
makikvues
bf10cd7c0c - implemented quicker search with pre-caching search files/directories 2021-01-13 22:36:53 +01:00
makikvues
c8683a9a48 - added debug to usage 2021-01-10 20:40:01 +01:00
makikvues
ff030224fe - reverted new test search method 
- added debugging information - memory, method execution time
 2021-01-10 20:37:49 +01:00
makikvues
2f467a3405 - huge refactoring 2021-01-10 14:46:34 +01:00