Commit Graph

112 Commits

Author SHA1 Message Date
Caleb Stewart 6b17fc2310 Fixed awk file-write payloads 2020-05-15 19:39:26 -04:00
Caleb Stewart 82ea5799d8 Added bind and alias commands to fully control configuration through command scripting. 2020-05-15 14:05:51 -04:00
Caleb Stewart ded22f18e4 Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-15 04:24:59 -04:00
Caleb Stewart 3fbb4076d1 Added initial configuration object and config script parsing including on_load hook 2020-05-15 04:24:42 -04:00
John Hammond 0ce067ada9 Added GTFObins cut, date, diff, dmesg, dpkg 2020-05-14 23:19:40 -04:00
Caleb Stewart 9a73d076f0 Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-14 23:17:39 -04:00
Caleb Stewart 84cb300be7 Added gtfobins testing script 2020-05-14 23:17:34 -04:00
John Hammond eb6d8d1972 Fixed the necessary pull to use Caleb's fork of prompt-toolkit 2020-05-14 22:26:53 -04:00
Caleb Stewart c35e0ff8ec Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-14 22:21:23 -04:00
Caleb Stewart 7655b40698 Merged master 2020-05-14 22:21:20 -04:00
John Hammond bc774eb7e0 Added new GTFOBins for curl and csh 2020-05-14 22:20:38 -04:00
Caleb Stewart 45810027d0 All old commands ported over 2020-05-14 22:18:21 -04:00
Caleb Stewart b1f3c54087 Added upload, download, and help commands. Improved error checking on PtyHandler.open 2020-05-14 04:01:28 -04:00
Caleb Stewart 81fb010b1a Added command framework with automatic argparse, syntax highlighting and tab completion including verbose help. Still in the progress of converting old commands before merging to master 2020-05-13 23:38:07 -04:00
John Hammond e19bae85aa Added new GTFOBinsx 2020-05-13 21:39:03 -04:00
John Hammond b9695a12bc Added chmod as a GTFOBins. Corrected backdoor functionality when asking for password 2020-05-13 19:24:13 -04:00
John Hammond 84a5cb7deb Changed privesc methods to use run() rather than process()... seems to work?? Added socat as a gtfobins 2020-05-13 18:58:31 -04:00
John Hammond 80c4e9839a Moved screen privesc method to use the new remote file open() syntax 2020-05-13 18:00:25 -04:00
Caleb Stewart b9f3a572a7 Tested authorized_keys clobbering with only a file-write primitive 2020-05-13 17:51:39 -04:00
Caleb Stewart 38d16794fe Fixed botched merge 2020-05-13 16:30:55 -04:00
John Hammond b5f1bcb4ce Corrected pty sending and sudo password things 2020-05-13 16:01:26 -04:00
Caleb Stewart 42d845def4 Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-13 15:27:57 -04:00
Caleb Stewart ac948183a3 Added ssh privesc capability through file read and/or file write 2020-05-13 15:27:01 -04:00
John Hammond 96c708a169 Added `requests` module into requrements. Should fix #9 2020-05-13 10:43:45 -04:00
John Hammond d797eed718 Adding a comment for clarity on sleeping 2020-05-13 00:21:53 -04:00
John Hammond cd54ffb2fc Corrected some nonsense while accidentially reading command echoes 2020-05-13 00:20:51 -04:00
Caleb Stewart fa1d07d797 Fixed privesc.read_file and privesc.write_file 2020-05-12 23:31:25 -04:00
Caleb Stewart e6d4e955dc Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-12 20:45:57 -04:00
Caleb Stewart d656849fbd Reworking privesc framework to better allow other methods (e.g. ssh key clobbering) 2020-05-12 20:45:52 -04:00
John Hammond 445e47731e Added new requirements into requirements.txt 2020-05-12 20:17:17 -04:00
Caleb Stewart e661d0225d Fixed cat typo in gtfobins.json 2020-05-12 14:13:17 -04:00
Caleb Stewart 177f1bd9ba Added GTFObins downloader and uploader and an asciinema cast 2020-05-12 13:53:28 -04:00
Caleb Stewart 935549fac1
Merge pull request #8 from calebstewart/gtfobins-update
Gtfobins update
2020-05-12 03:16:48 -04:00
Caleb Stewart 09d78cac67 Vast gtfobins improvements. Added new method 'open' to PtyHandler which allows generically opening a remote file as a file-like object (read/write) via new gtfobins module 2020-05-12 03:12:34 -04:00
Caleb Stewart 425a3c99cd Doesn't work yet 2020-05-11 15:27:49 -04:00
John Hammond 983f37e6d6 Added vim as a GTFOBin. Testing resolved a clusterfuck 2020-05-10 23:17:03 -04:00
John Hammond 2a4ab160d3 Merge branch 'master' of https://github.com/calebstewart/pwncat 2020-05-10 19:57:32 -04:00
John Hammond 27fe9288c4 Added some GTFOBins 2020-05-10 19:55:47 -04:00
Caleb Stewart f173e22d16 Added ability for bidirectional binary IO w/ remote process 2020-05-10 19:55:20 -04:00
Caleb Stewart a2195d6575 Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-10 16:12:24 -04:00
Caleb Stewart 96bdb89336 Added busybox staging. Still need to fix all the references to the new which method. 2020-05-10 16:12:20 -04:00
John Hammond d48aaa0eb1 Updated README 2020-05-10 16:08:50 -04:00
John Hammond f715bbd9a3
Merge pull request #7 from spwx/master
Installation instructions
2020-05-10 15:05:14 -04:00
Sean e0e75f1071 Install pwncat into its virtualenv 2020-05-10 11:19:43 -04:00
Sean 1cff5653dd Add installation instructions
'netifaces' requires the python headers to install. I added the Debian
instructions to install them.
2020-05-10 10:59:19 -04:00
Sean 53cf6a855c Add dependencies 2020-05-10 10:22:11 -04:00
John Hammond 18e28be292 Added dirtycow (still untested) and added screen4.5.0 privesc... THAT WORKS! 2020-05-10 03:16:25 -04:00
John Hammond 199d58b546 Merge branch 'master' of https://github.com/calebstewart/pwncat 2020-05-10 01:21:36 -04:00
John Hammond 7a3c4f3bb4 Started the process for dirtcow 2020-05-10 01:21:27 -04:00
Caleb Stewart 622df66446 Added EUID backdoor privesc code 2020-05-10 01:21:07 -04:00