2021-06-15 21:59:33 +02:00
# Changelog
All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog ](https://keepachangelog.com/en/1.0.0/ ),
and this project adheres to [Semantic Versioning ](https://semver.org/spec/v2.0.0.html ).
The Changelog starts with v0.4.1, because we did not keep one before that,
and simply didn't have the time to go back and retroactively create one.
## [Unreleased]
2021-06-19 02:21:25 +02:00
2021-07-17 23:07:49 +02:00
### Fixed
- Possible exception due to _pre-registering_ of `session` with `manager`
2021-08-11 00:30:11 +02:00
- Covered edge case in sudo rule parsing for wildcards ([#183](https://github.com/calebstewart/pwncat/issue/183))
- Added fallthrough cases for PTY methods in case of misbehaving binaries (looking at you: `screen` )
2021-07-18 19:54:09 +02:00
- Fixed handling of `socket.getpeername` when `Socket` channel uses IPv6 ([#159](https://github.com/calebstewart/pwncat/issues/159)).
2021-08-12 07:41:46 +02:00
- Fixed verbose logging handler to be __unique__ for every `channel`
- Fixed docstrings in `Command` modules
2021-08-31 23:35:26 +02:00
- Changed docker base image to `python3.9-alpine` to fix python version issues.
2021-09-19 07:36:09 +02:00
- Added logic for calling correct paramiko method when reloading an encrypted SSH privat ekey ([#185](https://github.com/calebstewart/issues/185)).
2021-07-17 23:07:49 +02:00
### Added
- Added alternatives to `bash` to be used during _shell upgrade_ for a _better shell_
- Added a warning message when a `KeyboardInterrupt` is caught
2021-08-12 07:41:46 +02:00
- Added `--verbose/-V` for argument parser
- Added `OSError` for `bind` protocol to show appropriate error messages
2021-07-17 23:07:49 +02:00
### Changed
- Changed some 'red' warning message color to 'yellow'
2021-08-10 23:09:11 +02:00
- Leak private keys for all users w/ file-read ability as UID=0 ([#181](https://github.com/calebstewart/pwncat/issues/181))
- Raise `PermissionError` when underlying processes terminate unsuccessfully for `LinuxReader` and `LinuxWriter`
2021-07-17 23:07:49 +02:00
2021-06-19 02:21:25 +02:00
## [0.4.3] - 2021-06-18
Patch fix release. Major fixes are the correction of file IO for LinuxWriters and
improved stability with better exception handling.
2021-06-16 23:24:40 +02:00
### Fixed
- Pinned container base image to alpine 3.13.5 and installed to virtualenv ([#134](https://github.com/calebstewart/pwncat/issues/134))
2021-06-16 23:31:54 +02:00
- Fixed syntax for f-strings in escalation command
2021-06-19 00:33:21 +02:00
- Re-added `readline` import for windows platform after being accidentally removed
2021-07-20 22:30:00 +02:00
- Corrected processing of password in connection string
2021-06-16 21:57:47 +02:00
### Changed
- Changed session tracking so session IDs aren't reused
- Changed zsh prompt to match CWD of other shell prompts
2021-06-19 00:44:23 +02:00
- Improved exception handling throughout framework ([#133](https://github.com/calebstewart/pwncat/issues/133))
2021-06-17 23:47:07 +02:00
- Added explicit permission checks when opening files
2021-06-18 20:12:47 +02:00
- Changed LinuxWriter close routine again to account for needed EOF signals ([#140](https://github.com/calebstewart/pwncat/issues/140))
### Added
- Added better file io test cases
2021-06-15 21:59:33 +02:00
2021-06-16 03:24:13 +02:00
## [0.4.2] - 2021-06-15
Quick patch release due to corrected bug in `ChannelFile` which caused command
output to be empty in some situations.
### Fixed
2021-06-15 21:59:33 +02:00
- Fixed `linux.enumerate.system.network` to work with old and new style `ip` .
2021-06-16 03:17:08 +02:00
- Fixed `ChannelFile.recvinto` which will no longer raise `BlockingIOError` ([#126](https://github.com/calebstewart/pwncat/issues/126), [#131 ](https://github.com/calebstewart/pwncat/issues/131 ))
- Fixed sessions command with invalid session ID ([#130](https://github.com/calebstewart/pwncat/issues/130))
- Fixed zsh shell prompt color syntax ([#130](https://github.com/calebstewart/pwncat/issues/130))
2021-06-16 03:24:13 +02:00
### Added
2021-06-15 22:37:44 +02:00
- Added Pull Request template
- Added CONTRIBUTING.md
2021-06-16 03:17:08 +02:00
- Added `--version` option to entrypoint to retrieve pwncat version
- Added `latest` tag to documented install command to prevent dev installs
2021-06-15 21:59:33 +02:00
## [0.4.1] - 2021-06-14
### Added
2021-06-16 03:17:08 +02:00
- Differentiate prompt syntax for standard bash, zsh and sh ([#126](https://github.com/calebstewart/pwncat/issues/126))
2021-06-15 21:59:33 +02:00
- Added `-c=never` to `ip` command in `linux.enumerate.system.network`
2021-06-16 03:17:08 +02:00
([#126](https://github.com/calebstewart/pwncat/issues/126))
- Updated Dockerfile to properly build post-v0.4.0 releases ([#125](https://github.com/calebstewart/pwncat/issues/125))
2021-06-15 21:59:33 +02:00
- Added check for `nologin` shell to stop pwncat from accidentally
2021-06-16 03:17:08 +02:00
closing the session ([#116](https://github.com/calebstewart/pwncat/issues/116))
- Resolved all flake8 errors ([#123](https://github.com/calebstewart/pwncat/issues/123))
- Improved EOF handling for Linux file-writes ([#117](https://github.com/calebstewart/pwncat/issues/117))
