446 lines
14 KiB
YAML
446 lines
14 KiB
YAML
name: CI-master_test
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
paths-ignore:
|
|
- '.github/**'
|
|
|
|
schedule:
|
|
- cron: "5 4 * * SUN"
|
|
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
Build_and_test_winpeas_master:
|
|
runs-on: windows-latest
|
|
|
|
# environment variables
|
|
env:
|
|
Solution_Path: 'winPEAS\winPEASexe\winPEAS.sln'
|
|
Configuration: 'Release'
|
|
DotFuscatorGeneratedPath: 'winPEAS\winPEASexe\binaries\Obfuscated Releases\Dotfuscated'
|
|
|
|
steps:
|
|
# checkout
|
|
- name: Checkout
|
|
uses: actions/checkout@master
|
|
with:
|
|
ref: ${{ github.head_ref }}
|
|
|
|
- name: Download regexes
|
|
run: |
|
|
powershell.exe -ExecutionPolicy Bypass -File build_lists/download_regexes.ps1
|
|
|
|
# Add MSBuild to the PATH: https://github.com/microsoft/setup-msbuild
|
|
- name: Setup MSBuild.exe
|
|
uses: microsoft/setup-msbuild@v1.0.2
|
|
|
|
# Setup NuGet
|
|
- name: Setup NuGet.exe
|
|
uses: nuget/setup-nuget@v1
|
|
|
|
# Restore the packages for testing
|
|
- name: Restore the application
|
|
run: nuget restore $env:Solution_Path
|
|
|
|
# build
|
|
- name: run MSBuild
|
|
run: msbuild $env:Solution_Path
|
|
|
|
# Execute all unit tests in the solution - It's broken :(
|
|
#- name: Execute unit tests
|
|
# run: dotnet test $env:Solution_Path
|
|
|
|
# Build & update all versions
|
|
- name: Build all versions
|
|
run: |
|
|
echo "build x64"
|
|
msbuild -m $env:Solution_Path /t:Rebuild /p:Configuration=$env:Configuration /p:Platform="x64"
|
|
|
|
echo "build x86"
|
|
msbuild -m $env:Solution_Path /t:Rebuild /p:Configuration=$env:Configuration /p:Platform="x86"
|
|
|
|
echo "build Any CPU"
|
|
msbuild -m $env:Solution_Path /t:Rebuild /p:Configuration=$env:Configuration /p:Platform="Any CPU"
|
|
|
|
# Copy the built versions
|
|
- name: Copy all versions
|
|
run: |
|
|
echo "copy x64"
|
|
cp winPEAS\winPEASexe\winPEAS\bin\x64\$env:Configuration\winPEAS.exe winPEAS\winPEASexe\binaries\x64\$env:Configuration\winPEASx64.exe
|
|
|
|
echo "copy x86"
|
|
cp winPEAS\winPEASexe\winPEAS\bin\x86\$env:Configuration\winPEAS.exe winPEAS\winPEASexe\binaries\x86\$env:Configuration\winPEASx86.exe
|
|
|
|
echo "copy Any"
|
|
cp winPEAS\winPEASexe\winPEAS\bin\$env:Configuration\winPEAS.exe winPEAS\winPEASexe\binaries\$env:Configuration\winPEASany.exe
|
|
|
|
# Setup DotFuscator
|
|
- name: Setup DotFuscator
|
|
run: |
|
|
7z x winPEAS\winPEASexe\Dotfuscator\DotfuscatorCE.zip
|
|
whoami
|
|
mkdir -p $env:USERPROFILE\AppData\Local\"PreEmptive Solutions"\"Dotfuscator Community Edition"\6.0 -erroraction 'silentlycontinue'
|
|
cp DotfuscatorCE\license\* $env:USERPROFILE\AppData\Local\"PreEmptive Solutions"\"Dotfuscator Community Edition"\6.0\
|
|
# build obfuscated versions
|
|
- name: Build obfuscated versions
|
|
run: |
|
|
DotfuscatorCE\dotfuscator.exe "winPEAS\winPEASexe\binaries\Obfuscated Releases\x64.xml"
|
|
DotfuscatorCE\dotfuscator.exe "winPEAS\winPEASexe\binaries\Obfuscated Releases\x86.xml"
|
|
DotfuscatorCE\dotfuscator.exe "winPEAS\winPEASexe\binaries\Obfuscated Releases\any.xml"
|
|
# copy the files
|
|
- name: Copy Dotfuscator generated files
|
|
run: |
|
|
cp $env:DotFuscatorGeneratedPath\x64\winPEASx64.exe "winPEAS\winPEASexe\binaries\Obfuscated Releases\winPEASx64_ofs.exe"
|
|
cp $env:DotFuscatorGeneratedPath\x86\winPEASx86.exe "winPEAS\winPEASexe\binaries\Obfuscated Releases\winPEASx86_ofs.exe"
|
|
cp $env:DotFuscatorGeneratedPath\any\winPEASany.exe "winPEAS\winPEASexe\binaries\Obfuscated Releases\winPEASany_ofs.exe"
|
|
|
|
# Upload all the versions for the release
|
|
- name: Upload winpeasx64
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: winPEASx64.exe
|
|
path: winPEAS\winPEASexe\binaries\x64\Release\winPEASx64.exe
|
|
|
|
- name: Upload winpeasx86
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: winPEASx86.exe
|
|
path: winPEAS\winPEASexe\binaries\x86\Release\winPEASx86.exe
|
|
|
|
- name: Upload winpeasany
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: winPEASany.exe
|
|
path: winPEAS\winPEASexe\binaries\Release\winPEASany.exe
|
|
|
|
- name: Upload winpeasx64ofs
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: winPEASx64_ofs.exe
|
|
path: winPEAS\winPEASexe\binaries\Obfuscated Releases\winPEASx64_ofs.exe
|
|
|
|
- name: Upload winpeasx86ofs
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: winPEASx86_ofs.exe
|
|
path: winPEAS\winPEASexe\binaries\Obfuscated Releases\winPEASx86_ofs.exe
|
|
|
|
- name: Upload winpeasanyofs
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: winPEASany_ofs.exe
|
|
path: winPEAS\winPEASexe\binaries\Obfuscated Releases\winPEASany_ofs.exe
|
|
|
|
- name: Upload winpeas.bat
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: winPEAS.bat
|
|
path: winPEAS\winPEASbat\winPEAS.bat
|
|
|
|
- name: Upload winpeas.ps1
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: winPEAS.ps1
|
|
path: winPEAS\winPEASps1\winPEAS.ps1
|
|
|
|
# Git add
|
|
#- name: Create local changes
|
|
# run: |
|
|
# git add winPEAS\winPEASexe\binaries\Release\*
|
|
# git add winPEAS\winPEASexe\binaries\x64\*
|
|
# git add winPEAS\winPEASexe\binaries\x86\*
|
|
# git add "winPEAS\winPEASexe\binaries\Obfuscated Releases\*.exe"
|
|
# Git commit
|
|
#- name: Commit results to Github
|
|
# run: |
|
|
# git config --local user.email "ci@winpeas.com"
|
|
# git config --global user.name "CI-winpeas"
|
|
# git pull origin "${{ github.ref }}" --autostash --rebase -Xours
|
|
# git commit -m "winpeas binaries auto update" -a --allow-empty
|
|
# Git push
|
|
#- name: Push changes
|
|
# uses: ad-m/github-push-action@master
|
|
# with:
|
|
# branch: ${{ github.head_ref }}
|
|
# github_token: ${{ secrets.GITHUB_TOKEN }}
|
|
# force: true
|
|
|
|
Build_and_test_linpeas_master:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
# Download repo
|
|
- uses: actions/checkout@v2
|
|
with:
|
|
ref: ${{ github.head_ref }}
|
|
|
|
# Setup go
|
|
- uses: actions/setup-go@v2
|
|
with:
|
|
go-version: 1.17.0-rc1
|
|
stable: false
|
|
- run: go version
|
|
|
|
# Build linpeas
|
|
- name: Build linpeas
|
|
run: |
|
|
python3 -m pip install PyYAML
|
|
cd linPEAS
|
|
python3 -m builder.linpeas_builder
|
|
|
|
# Build linpeas binaries
|
|
- name: Build linpeas binaries
|
|
run: |
|
|
git clone https://github.com/carlospolop/sh2bin
|
|
cd sh2bin
|
|
bash build.sh ../linPEAS/linpeas.sh
|
|
mv builds/sh2bin_linux_386 builds/linpeas_linux_386
|
|
mv builds/sh2bin_linux_amd64 builds/linpeas_linux_amd64
|
|
mv builds/sh2bin_linux_arm builds/linpeas_linux_arm
|
|
mv builds/sh2bin_linux_arm64 builds/linpeas_linux_arm64
|
|
mv builds/sh2bin_darwin_amd64 builds/linpeas_darwin_amd64
|
|
mv builds/sh2bin_darwin_arm64 builds/linpeas_darwin_arm64
|
|
ls -lR ./
|
|
|
|
# Run linpeas help as quick test
|
|
- name: Run linpeas help
|
|
run: linPEAS/linpeas.sh -h
|
|
|
|
# Run linpeas as a test
|
|
- name: Run linpeas system_information
|
|
run: linPEAS/linpeas.sh -o system_information -a
|
|
|
|
- name: Run linpeas container
|
|
run: linPEAS/linpeas.sh -o container -a
|
|
|
|
- name: Run linpeas cloud
|
|
run: linPEAS/linpeas.sh -o cloud -a
|
|
|
|
- name: Run linpeas procs_crons_timers_srvcs_sockets
|
|
run: linPEAS/linpeas.sh -o procs_crons_timers_srvcs_sockets -a
|
|
|
|
- name: Run linpeas network_information
|
|
run: linPEAS/linpeas.sh -o network_information -t -a
|
|
|
|
- name: Run linpeas users_information
|
|
run: linPEAS/linpeas.sh -o users_information -a
|
|
|
|
- name: Run linpeas software_information
|
|
run: linPEAS/linpeas.sh -o software_information -a
|
|
|
|
- name: Run linpeas interesting_perms_files
|
|
run: linPEAS/linpeas.sh -o interesting_perms_files -a
|
|
|
|
- name: Run linpeas interesting_files
|
|
run: linPEAS/linpeas.sh -o interesting_files -a
|
|
|
|
# Too much time
|
|
#- name: Run linpeas api_keys_regex
|
|
# run: linPEAS/linpeas.sh -o api_keys_regex -r
|
|
|
|
# Upload files for release
|
|
- name: Upload linpeas.sh
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: linpeas.sh
|
|
path: linPEAS/linpeas.sh
|
|
|
|
- name: Upload linpeas_fat.sh
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: linpeas_fat.sh
|
|
path: linPEAS/linpeas_fat.sh
|
|
|
|
## Linux bins
|
|
- name: Upload linpeas_linux_386
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: linpeas_linux_386
|
|
path: sh2bin/builds/linpeas_linux_386
|
|
|
|
- name: Upload linpeas_linux_amd64
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: linpeas_linux_amd64
|
|
path: sh2bin/builds/linpeas_linux_amd64
|
|
|
|
- name: Upload linpeas_linux_arm
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: linpeas_linux_arm
|
|
path: sh2bin/builds/linpeas_linux_arm
|
|
|
|
- name: Upload linpeas_linux_arm64
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: linpeas_linux_arm64
|
|
path: sh2bin/builds/linpeas_linux_arm64
|
|
|
|
## Darwin bins
|
|
- name: Upload linpeas_darwin_amd64
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: linpeas_darwin_amd64
|
|
path: sh2bin/builds/linpeas_darwin_amd64
|
|
|
|
- name: Upload linpeas_darwin_arm64
|
|
uses: actions/upload-artifact@v2
|
|
with:
|
|
name: linpeas_darwin_arm64
|
|
path: sh2bin/builds/linpeas_darwin_arm64
|
|
|
|
# Clean sh2bin repo
|
|
- name: Cleaning sh2bin
|
|
run: rm -rf sh2bin
|
|
|
|
# - name: Create local changes
|
|
# run: git add linPEAS/linpeas.sh
|
|
# - name: Commit results to Github
|
|
# run: |
|
|
# git config --local user.email ""
|
|
# git config --global user.name "CI-linpeas-ubuntu"
|
|
# git pull origin "${{ github.ref }}" --autostash --rebase -Xours
|
|
# git commit -m "linpeas.sh auto update" -a --allow-empty
|
|
# - name: Push changes
|
|
# uses: ad-m/github-push-action@master
|
|
# with:
|
|
# branch: ${{ github.head_ref }}
|
|
# github_token: ${{ secrets.GITHUB_TOKEN }}
|
|
# force: true
|
|
|
|
Build_and_test_macpeas_master:
|
|
runs-on: macos-latest
|
|
|
|
steps:
|
|
# Download repo
|
|
- uses: actions/checkout@v2
|
|
|
|
# Build linpeas
|
|
- name: Build macpeas
|
|
run: |
|
|
python3 -m pip install PyYAML
|
|
python3 -m pip install requests
|
|
cd linPEAS
|
|
python3 -m builder.linpeas_builder
|
|
|
|
# Run linpeas help as quick test
|
|
- name: Run macpeas help
|
|
run: linPEAS/linpeas.sh -h
|
|
|
|
# Run macpeas parts to test it
|
|
#- name: Run macpeas
|
|
# run: linPEAS/linpeas.sh -D -o system_information,container,procs_crons_timers_srvcs_sockets,network_information,users_information,software_information
|
|
|
|
|
|
Publish_release:
|
|
runs-on: ubuntu-latest
|
|
needs: [Build_and_test_winpeas_master, Build_and_test_linpeas_master, Build_and_test_macpeas_master]
|
|
|
|
steps:
|
|
# Download files to release
|
|
- name: Download winpeasx64ofs
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: winPEASx64_ofs.exe
|
|
|
|
- name: Download winpeasx86ofs
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: winPEASx86_ofs.exe
|
|
|
|
- name: Download winpeasanyofs
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: winPEASany_ofs.exe
|
|
|
|
- name: Download winpeasx64
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: winPEASx64.exe
|
|
|
|
- name: Download winpeasx86
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: winPEASx86.exe
|
|
|
|
- name: Download winpeasany
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: winPEASany.exe
|
|
|
|
- name: Download winpeas.bat
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: winPEAS.bat
|
|
|
|
- name: Download linpeas.sh
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: linpeas.sh
|
|
|
|
- name: Download linpeas_fat.sh
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: linpeas_fat.sh
|
|
|
|
- name: Download linpeas_linux_386
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: linpeas_linux_386
|
|
|
|
- name: Download linpeas_linux_amd64
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: linpeas_linux_amd64
|
|
|
|
- name: Download linpeas_linux_arm
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: linpeas_linux_arm
|
|
|
|
- name: Download linpeas_linux_arm64
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: linpeas_linux_arm64
|
|
|
|
- name: Download linpeas_darwin_amd64
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: linpeas_darwin_amd64
|
|
|
|
- name: Download linpeas_darwin_arm64
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: linpeas_darwin_arm64
|
|
|
|
- name: Get current date
|
|
id: date
|
|
run: echo "::set-output name=date::$(date +'%Y%m%d')"
|
|
|
|
- name: Generate random
|
|
id: random_n
|
|
run: echo "::set-output name=some_rand::$(openssl rand -hex 4)"
|
|
|
|
# Create the release
|
|
- name: Create Release
|
|
id: create_release
|
|
uses: actions/create-release@v1
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
with:
|
|
tag_name: ${{steps.date.outputs.date}}-${{steps.random_n.outputs.some_rand}}
|
|
release_name: Release ${{ github.ref }} ${{steps.date.outputs.date}}-${{steps.random_n.outputs.some_rand}}
|
|
draft: false
|
|
prerelease: false
|
|
|
|
- id: upload_release_assets
|
|
uses: dwenegar/upload-release-assets@v1
|
|
with:
|
|
release_id: ${{ steps.create_release.outputs.id }}
|
|
assets_path: .
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|