Caleb Stewart
|
b0aff37f77
|
Added initial persist command to track, install, and remove persistence methods
|
2020-05-16 13:43:11 -04:00 |
|
Caleb Stewart
|
6b17fc2310
|
Fixed awk file-write payloads
|
2020-05-15 19:39:26 -04:00 |
|
Caleb Stewart
|
82ea5799d8
|
Added bind and alias commands to fully control configuration through command scripting.
|
2020-05-15 14:05:51 -04:00 |
|
Caleb Stewart
|
ded22f18e4
|
Merge branch 'master' of github.com:calebstewart/pwncat
|
2020-05-15 04:24:59 -04:00 |
|
Caleb Stewart
|
3fbb4076d1
|
Added initial configuration object and config script parsing including on_load hook
|
2020-05-15 04:24:42 -04:00 |
|
John Hammond
|
0ce067ada9
|
Added GTFObins cut, date, diff, dmesg, dpkg
|
2020-05-14 23:19:40 -04:00 |
|
John Hammond
|
bc774eb7e0
|
Added new GTFOBins for curl and csh
|
2020-05-14 22:20:38 -04:00 |
|
John Hammond
|
e19bae85aa
|
Added new GTFOBinsx
|
2020-05-13 21:39:03 -04:00 |
|
John Hammond
|
b9695a12bc
|
Added chmod as a GTFOBins. Corrected backdoor functionality when asking for password
|
2020-05-13 19:24:13 -04:00 |
|
John Hammond
|
84a5cb7deb
|
Changed privesc methods to use run() rather than process()... seems to work?? Added socat as a gtfobins
|
2020-05-13 18:58:31 -04:00 |
|
Caleb Stewart
|
b9f3a572a7
|
Tested authorized_keys clobbering with only a file-write primitive
|
2020-05-13 17:51:39 -04:00 |
|
Caleb Stewart
|
38d16794fe
|
Fixed botched merge
|
2020-05-13 16:30:55 -04:00 |
|
Caleb Stewart
|
42d845def4
|
Merge branch 'master' of github.com:calebstewart/pwncat
|
2020-05-13 15:27:57 -04:00 |
|
Caleb Stewart
|
ac948183a3
|
Added ssh privesc capability through file read and/or file write
|
2020-05-13 15:27:01 -04:00 |
|
John Hammond
|
96c708a169
|
Added requests module into requrements. Should fix #9
|
2020-05-13 10:43:45 -04:00 |
|
Caleb Stewart
|
fa1d07d797
|
Fixed privesc.read_file and privesc.write_file
|
2020-05-12 23:31:25 -04:00 |
|
Caleb Stewart
|
d656849fbd
|
Reworking privesc framework to better allow other methods (e.g. ssh key clobbering)
|
2020-05-12 20:45:52 -04:00 |
|
Caleb Stewart
|
e661d0225d
|
Fixed cat typo in gtfobins.json
|
2020-05-12 14:13:17 -04:00 |
|
Caleb Stewart
|
177f1bd9ba
|
Added GTFObins downloader and uploader and an asciinema cast
|
2020-05-12 13:53:28 -04:00 |
|
Caleb Stewart
|
09d78cac67
|
Vast gtfobins improvements. Added new method 'open' to PtyHandler which allows generically opening a remote file as a file-like object (read/write) via new gtfobins module
|
2020-05-12 03:12:34 -04:00 |
|
Caleb Stewart
|
425a3c99cd
|
Doesn't work yet
|
2020-05-11 15:27:49 -04:00 |
|
John Hammond
|
983f37e6d6
|
Added vim as a GTFOBin. Testing resolved a clusterfuck
|
2020-05-10 23:17:03 -04:00 |
|
John Hammond
|
2a4ab160d3
|
Merge branch 'master' of https://github.com/calebstewart/pwncat
|
2020-05-10 19:57:32 -04:00 |
|
John Hammond
|
27fe9288c4
|
Added some GTFOBins
|
2020-05-10 19:55:47 -04:00 |
|
Caleb Stewart
|
f173e22d16
|
Added ability for bidirectional binary IO w/ remote process
|
2020-05-10 19:55:20 -04:00 |
|
Caleb Stewart
|
96bdb89336
|
Added busybox staging. Still need to fix all the references to the new which method.
|
2020-05-10 16:12:20 -04:00 |
|
John Hammond
|
18e28be292
|
Added dirtycow (still untested) and added screen4.5.0 privesc... THAT WORKS!
|
2020-05-10 03:16:25 -04:00 |
|
John Hammond
|
7a3c4f3bb4
|
Started the process for dirtcow
|
2020-05-10 01:21:27 -04:00 |
|
John Hammond
|
ac568f271f
|
Fixed errata from merge
|
2020-05-09 22:06:45 -04:00 |
|
John Hammond
|
a78c7926c0
|
Merge branch 'readwrite' of https://github.com/calebstewart/pwncat into readwrite
|
2020-05-09 21:41:41 -04:00 |
|
John Hammond
|
64fc44bdae
|
Added more gtfobins!
|
2020-05-09 21:40:37 -04:00 |
|
Caleb Stewart
|
b21761ff6f
|
Working /etc/passwd overwrite to root.
|
2020-05-09 21:38:24 -04:00 |
|
John Hammond
|
2d65544b77
|
Added new GTFObins entries
|
2020-05-09 19:00:15 -04:00 |
|
John Hammond
|
bebe20dcfb
|
Added "safe" property to gtfobins and started to add more GTFObins
|
2020-05-09 18:36:51 -04:00 |
|
John Hammond
|
3b7bf075d5
|
Added privesc read capability! Only somewhat tested...
|
2020-05-09 17:05:18 -04:00 |
|
Caleb Stewart
|
068c55f868
|
Added sudo awareness to gtfobins and updated privesc/sudo to understand the new interface. Sudo now supports wildcard listings and can intelligently parse whether a privesc is possible.
|
2020-05-09 15:02:04 -04:00 |
|
John Hammond
|
1b54ade0fb
|
Added lots of dirty sudo privesc code. It works!
|
2020-05-09 03:28:58 -04:00 |
|
Caleb Stewart
|
0ea0ef2546
|
Added abstract gtfobins interface
|
2020-05-09 00:49:38 -04:00 |
|