mirror of
https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite.git
synced 2025-12-17 13:49:01 +00:00
Compare commits
5 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
940b4bc791 | ||
|
|
b2e1a4e64a | ||
|
|
cb3e62a3ff | ||
|
|
701d41073a | ||
|
|
31e318c870 |
@@ -42,8 +42,17 @@ fi
|
|||||||
#-- https://stackoverflow.com/a/37939589
|
#-- https://stackoverflow.com/a/37939589
|
||||||
kernelversion=$(uname -r | awk -F"-" '{print $1}')
|
kernelversion=$(uname -r | awk -F"-" '{print $1}')
|
||||||
kernelnumber=$(echo $kernelversion | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }')
|
kernelnumber=$(echo $kernelversion | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }')
|
||||||
if [ $kernelnumber -ge 5008000000 ] && [ $kernelnumber -lt 5017000000 ]; then # if kernel version beteen 5.8 and 5.17
|
if [ $kernelnumber -ge 5008000000 ] && [ $kernelnumber -lt 5017000000 ]; then # if kernel version between 5.8 and 5.17
|
||||||
echo "Vulnerable to CVE-2022-0847" | sed -${E} "s,.*,${SED_RED_YELLOW},"
|
echo "Potentially Vulnerable to CVE-2022-0847" | sed -${E} "s,.*,${SED_RED},"
|
||||||
|
echo ""
|
||||||
|
fi
|
||||||
|
|
||||||
|
#-- SY) CVE-2022-2588
|
||||||
|
#-- https://github.com/Markakd/CVE-2022-2588
|
||||||
|
kernelversion=$(uname -r | awk -F"-" '{print $1}')
|
||||||
|
kernelnumber=$(echo $kernelversion | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }')
|
||||||
|
if [ $kernelnumber -ge 3017000000 ] && [ $kernelnumber -lt 5019000000 ]; then # if kernel version between 3.17 and 5.19
|
||||||
|
echo "Potentially Vulnerable to CVE-2022-2588" | sed -${E} "s,.*,${SED_RED},"
|
||||||
echo ""
|
echo ""
|
||||||
fi
|
fi
|
||||||
echo ""
|
echo ""
|
||||||
|
|||||||
@@ -77,7 +77,7 @@ enumerateDockerSockets() {
|
|||||||
dockerVersion="$(echo_not_found)"
|
dockerVersion="$(echo_not_found)"
|
||||||
if ! [ "$SEARCHED_DOCKER_SOCKETS" ]; then
|
if ! [ "$SEARCHED_DOCKER_SOCKETS" ]; then
|
||||||
SEARCHED_DOCKER_SOCKETS="1"
|
SEARCHED_DOCKER_SOCKETS="1"
|
||||||
for int_sock in $(find / ! -path "/sys/*" -type s -name "docker.sock" -o -name "docker.socket" -o -name "dockershim.sock" -n -name "containerd.sock" -o -name "crio.sock" -o -name "frakti.sock" -o -name "rktlet.sock" 2>/dev/null); do
|
for int_sock in $(find / ! -path "/sys/*" -type s -name "docker.sock" -o -name "docker.socket" -o -name "dockershim.sock" -o -name "containerd.sock" -o -name "crio.sock" -o -name "frakti.sock" -o -name "rktlet.sock" 2>/dev/null); do
|
||||||
if ! [ "$IAMROOT" ] && [ -w "$int_sock" ]; then
|
if ! [ "$IAMROOT" ] && [ -w "$int_sock" ]; then
|
||||||
if echo "$int_sock" | grep -Eq "docker"; then
|
if echo "$int_sock" | grep -Eq "docker"; then
|
||||||
dock_sock="$int_sock"
|
dock_sock="$int_sock"
|
||||||
|
|||||||
@@ -135,8 +135,9 @@ namespace winPEAS.Info.FilesInfo.McAfee
|
|||||||
|
|
||||||
SHA1 crypto = new SHA1CryptoServiceProvider();
|
SHA1 crypto = new SHA1CryptoServiceProvider();
|
||||||
|
|
||||||
var tDESKey = MyUtils.CombineArrays(crypto.ComputeHash(System.Text.Encoding.ASCII.GetBytes("<!@#$%^>")), new byte[] { 0x00, 0x00, 0x00, 0x00 });
|
//var tDESKey = MyUtils.CombineArrays(crypto.ComputeHash(System.Text.Encoding.ASCII.GetBytes("<!@#$%^>")), new byte[] { 0x00, 0x00, 0x00, 0x00 });
|
||||||
|
byte[] tDESKey = { 62, 241, 54, 184, 179, 59, 239, 188, 52, 38, 167, 181, 78, 196, 26, 55, 124, 211, 25, 155, 0, 0, 0, 0 };
|
||||||
|
|
||||||
// set the options we need
|
// set the options we need
|
||||||
var tDESalg = new TripleDESCryptoServiceProvider();
|
var tDESalg = new TripleDESCryptoServiceProvider();
|
||||||
tDESalg.Mode = CipherMode.ECB;
|
tDESalg.Mode = CipherMode.ECB;
|
||||||
|
|||||||
Reference in New Issue
Block a user