Commit Graph

184 Commits

Author SHA1 Message Date
John Hammond fa36727a0b Added gimp as a GTFOBins 2020-05-20 23:18:14 -04:00
Caleb Stewart fce965c0c8 Added initial privilege escalation api documentation 2020-05-20 23:00:17 -04:00
John Hammond c9cba4bf78 Added genisoimage as a GTFObin read 2020-05-20 22:42:13 -04:00
Caleb Stewart 21cddc0a05 Added better documentation for command definitions 2020-05-20 20:53:56 -04:00
Caleb Stewart 1c7b7ae7b8 Added initial victim object documentation 2020-05-20 20:29:49 -04:00
Caleb Stewart 72dc93e6f7 privesc now uses persist to overcome UID!=EUID
`pwncat.victim.privesc` will use the first available
and working persistence mechanism to overcome UID!=EUID
situations. Also, added more documentation.
2020-05-20 15:58:43 -04:00
Caleb Stewart 11fe2715ab PAM Backdoor
Added a PAM backdoor persistence method allowing known password for all
users and logging of plaintext passwords for any subsiquent
authentications.
2020-05-19 22:12:53 -04:00
Caleb Stewart 88b9ce4b46 Added reference to pwncat readthedocs page to readme 2020-05-19 16:37:57 -04:00
Caleb Stewart 0830b08d84 Changed the master_doc to index for docs. 2020-05-19 16:33:30 -04:00
Caleb Stewart 6971f2db06 Added initial stab at documentation and basic structure for generically handling remote services 2020-05-19 16:24:19 -04:00
Caleb Stewart 224ef48fab Fixed merge conflicts 2020-05-17 23:41:30 -04:00
Caleb Stewart b2ca8515cc Added initial database support for cross-session memory 2020-05-17 23:37:27 -04:00
John Hammond c930925d27 Added more GTFObins 2020-05-17 19:35:49 -04:00
John Hammond 14c67f9b4b Added more GTFOBins 2020-05-17 17:01:08 -04:00
Caleb Stewart 3c1e72342b Fixed GTFOBins parsing problem 2020-05-17 12:43:58 -04:00
Caleb Stewart d62366da45 Run/local command and shortcuts
Added the "run" and "local" commands for remote and local command
execution respectively and the "shortcut" command to allow for shortcuts
like "!ls" for local commands and "@ls" for remote commands.
2020-05-17 02:29:51 -04:00
Caleb Stewart 512dd045c1 Refactored code to allow access to privesc.victim from anywhere (singleton) 2020-05-16 21:11:48 -04:00
Caleb Stewart b0aff37f77 Added initial persist command to track, install, and remove persistence methods 2020-05-16 13:43:11 -04:00
Caleb Stewart 649618fdcc Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-15 19:39:32 -04:00
Caleb Stewart 6b17fc2310 Fixed awk file-write payloads 2020-05-15 19:39:26 -04:00
Caleb Stewart 205c7457c2
Merge pull request #12 from trevorbryant/master
Update README and setup.py
2020-05-15 19:34:43 -04:00
trevorbryant 9460a51e31 fix python install setup 2020-05-15 16:13:58 -04:00
trevorbryant 995ddd320f dependencies, install instructions 2020-05-15 16:13:38 -04:00
Caleb Stewart 82ea5799d8 Added bind and alias commands to fully control configuration through command scripting. 2020-05-15 14:05:51 -04:00
Caleb Stewart ded22f18e4 Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-15 04:24:59 -04:00
Caleb Stewart 3fbb4076d1 Added initial configuration object and config script parsing including on_load hook 2020-05-15 04:24:42 -04:00
John Hammond 0ce067ada9 Added GTFObins cut, date, diff, dmesg, dpkg 2020-05-14 23:19:40 -04:00
Caleb Stewart 9a73d076f0 Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-14 23:17:39 -04:00
Caleb Stewart 84cb300be7 Added gtfobins testing script 2020-05-14 23:17:34 -04:00
John Hammond eb6d8d1972 Fixed the necessary pull to use Caleb's fork of prompt-toolkit 2020-05-14 22:26:53 -04:00
Caleb Stewart c35e0ff8ec Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-14 22:21:23 -04:00
Caleb Stewart 7655b40698 Merged master 2020-05-14 22:21:20 -04:00
John Hammond bc774eb7e0 Added new GTFOBins for curl and csh 2020-05-14 22:20:38 -04:00
Caleb Stewart 45810027d0 All old commands ported over 2020-05-14 22:18:21 -04:00
Caleb Stewart b1f3c54087 Added upload, download, and help commands. Improved error checking on PtyHandler.open 2020-05-14 04:01:28 -04:00
Caleb Stewart 81fb010b1a Added command framework with automatic argparse, syntax highlighting and tab completion including verbose help. Still in the progress of converting old commands before merging to master 2020-05-13 23:38:07 -04:00
John Hammond e19bae85aa Added new GTFOBinsx 2020-05-13 21:39:03 -04:00
John Hammond b9695a12bc Added chmod as a GTFOBins. Corrected backdoor functionality when asking for password 2020-05-13 19:24:13 -04:00
John Hammond 84a5cb7deb Changed privesc methods to use run() rather than process()... seems to work?? Added socat as a gtfobins 2020-05-13 18:58:31 -04:00
John Hammond 80c4e9839a Moved screen privesc method to use the new remote file open() syntax 2020-05-13 18:00:25 -04:00
Caleb Stewart b9f3a572a7 Tested authorized_keys clobbering with only a file-write primitive 2020-05-13 17:51:39 -04:00
Caleb Stewart 38d16794fe Fixed botched merge 2020-05-13 16:30:55 -04:00
John Hammond b5f1bcb4ce Corrected pty sending and sudo password things 2020-05-13 16:01:26 -04:00
Caleb Stewart 42d845def4 Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-13 15:27:57 -04:00
Caleb Stewart ac948183a3 Added ssh privesc capability through file read and/or file write 2020-05-13 15:27:01 -04:00
John Hammond 96c708a169 Added `requests` module into requrements. Should fix #9 2020-05-13 10:43:45 -04:00
John Hammond d797eed718 Adding a comment for clarity on sleeping 2020-05-13 00:21:53 -04:00
John Hammond cd54ffb2fc Corrected some nonsense while accidentially reading command echoes 2020-05-13 00:20:51 -04:00
Caleb Stewart fa1d07d797 Fixed privesc.read_file and privesc.write_file 2020-05-12 23:31:25 -04:00
Caleb Stewart e6d4e955dc Merge branch 'master' of github.com:calebstewart/pwncat 2020-05-12 20:45:57 -04:00