Caleb Stewart
e4ddb0b38b
Added basic passwd overwrite escalation
2021-05-08 00:49:44 -04:00
Caleb Stewart
ea5cbf5c81
Added history back to database
2021-05-02 14:28:41 -04:00
Caleb Stewart
59a694619a
Removed sqlalchemy from mananager and session. Changed pwncatrc to memory uri. Added ZODB.
2021-04-30 22:32:47 -04:00
Caleb Stewart
9ca96e9b06
Initial work on automated testing
2021-04-10 15:52:47 -04:00
Caleb Stewart
e2d851ecd3
Added search and info commands for modules
2020-08-28 21:38:56 -04:00
Caleb Stewart
b46ec274a2
Moved gtfobins.json to the right location.
2020-05-29 04:32:31 -04:00
John Hammond
9f21985e1b
Added yum into gtfobins.json. THM machine Daily Bugle seemingly does not find it in sudo
2020-05-28 22:33:34 -04:00
Caleb Stewart
9b0067a4ed
Added gtfobins.json to the package data in setup.py as referenced in #14
2020-05-28 01:21:08 -04:00
John Hammond
4dddbb15de
Added more GTFObins... almost done...
2020-05-25 19:21:04 -04:00
John Hammond
93f59a17c8
Added a crap ton of GTFObins... almost done...
2020-05-25 02:56:52 -04:00
John Hammond
b1dcb47c80
Added GTFObin files up to the letter r
2020-05-24 23:54:55 -04:00
John Hammond
5a4823c8d3
Corrected the issue where base64 stream GTFOBin file writes would not work with files larger than 4096 bytes.
...
We patched base64io to include newlines.
2020-05-24 03:49:45 -04:00
John Hammond
a4e8767563
Added time as a GTFOBins
2020-05-24 01:12:51 -04:00
John Hammond
d8f2cbc85c
Added more GTFOBins
2020-05-24 00:59:46 -04:00
John Hammond
3edac48c55
Added valgrind as a GTFOBin
2020-05-23 23:33:33 -04:00
Caleb Stewart
511018f22e
Added nofork and pty options to socat shell
2020-05-23 16:08:54 -04:00
John Hammond
2eb9487e64
Got vim seemingly working as a GTFObin...
2020-05-23 04:34:37 -04:00
John Hammond
3801b50f14
Merge branch 'master' of https://github.com/calebstewart/pwncat
2020-05-23 03:09:32 -04:00
John Hammond
72b83c88b2
Added new GTFObins
2020-05-23 03:06:19 -04:00
Caleb Stewart
1e410830c9
Fixed handling no connection w/ no parameters
2020-05-23 02:47:48 -04:00
John Hammond
76f83ea076
Added git and grep as GTFOBins
2020-05-20 23:55:15 -04:00
John Hammond
7d483d16e7
Fixed broken JSON file and typo-corrected some docs
2020-05-20 23:24:04 -04:00
John Hammond
fa36727a0b
Added gimp as a GTFOBins
2020-05-20 23:18:14 -04:00
John Hammond
c9cba4bf78
Added genisoimage as a GTFObin read
2020-05-20 22:42:13 -04:00
Caleb Stewart
224ef48fab
Fixed merge conflicts
2020-05-17 23:41:30 -04:00
Caleb Stewart
b2ca8515cc
Added initial database support for cross-session memory
2020-05-17 23:37:27 -04:00
John Hammond
c930925d27
Added more GTFObins
2020-05-17 19:35:49 -04:00
John Hammond
14c67f9b4b
Added more GTFOBins
2020-05-17 17:01:08 -04:00
Caleb Stewart
d62366da45
Run/local command and shortcuts
...
Added the "run" and "local" commands for remote and local command
execution respectively and the "shortcut" command to allow for shortcuts
like "!ls" for local commands and "@ls" for remote commands.
2020-05-17 02:29:51 -04:00
Caleb Stewart
512dd045c1
Refactored code to allow access to privesc.victim from anywhere (singleton)
2020-05-16 21:11:48 -04:00
Caleb Stewart
b0aff37f77
Added initial persist command to track, install, and remove persistence methods
2020-05-16 13:43:11 -04:00
Caleb Stewart
6b17fc2310
Fixed awk file-write payloads
2020-05-15 19:39:26 -04:00
Caleb Stewart
82ea5799d8
Added bind and alias commands to fully control configuration through command scripting.
2020-05-15 14:05:51 -04:00
Caleb Stewart
ded22f18e4
Merge branch 'master' of github.com:calebstewart/pwncat
2020-05-15 04:24:59 -04:00
Caleb Stewart
3fbb4076d1
Added initial configuration object and config script parsing including on_load hook
2020-05-15 04:24:42 -04:00
John Hammond
0ce067ada9
Added GTFObins cut, date, diff, dmesg, dpkg
2020-05-14 23:19:40 -04:00
John Hammond
bc774eb7e0
Added new GTFOBins for curl and csh
2020-05-14 22:20:38 -04:00
John Hammond
e19bae85aa
Added new GTFOBinsx
2020-05-13 21:39:03 -04:00
John Hammond
b9695a12bc
Added chmod as a GTFOBins. Corrected backdoor functionality when asking for password
2020-05-13 19:24:13 -04:00
John Hammond
84a5cb7deb
Changed privesc methods to use run() rather than process()... seems to work?? Added socat as a gtfobins
2020-05-13 18:58:31 -04:00
Caleb Stewart
b9f3a572a7
Tested authorized_keys clobbering with only a file-write primitive
2020-05-13 17:51:39 -04:00
Caleb Stewart
38d16794fe
Fixed botched merge
2020-05-13 16:30:55 -04:00
Caleb Stewart
42d845def4
Merge branch 'master' of github.com:calebstewart/pwncat
2020-05-13 15:27:57 -04:00
Caleb Stewart
ac948183a3
Added ssh privesc capability through file read and/or file write
2020-05-13 15:27:01 -04:00
John Hammond
96c708a169
Added requests module into requrements. Should fix #9
2020-05-13 10:43:45 -04:00
Caleb Stewart
fa1d07d797
Fixed privesc.read_file and privesc.write_file
2020-05-12 23:31:25 -04:00
Caleb Stewart
d656849fbd
Reworking privesc framework to better allow other methods (e.g. ssh key clobbering)
2020-05-12 20:45:52 -04:00
Caleb Stewart
e661d0225d
Fixed cat typo in gtfobins.json
2020-05-12 14:13:17 -04:00
Caleb Stewart
177f1bd9ba
Added GTFObins downloader and uploader and an asciinema cast
2020-05-12 13:53:28 -04:00
Caleb Stewart
09d78cac67
Vast gtfobins improvements. Added new method 'open' to PtyHandler which allows generically opening a remote file as a file-like object (read/write) via new gtfobins module
2020-05-12 03:12:34 -04:00
