pspy
PEASS-ng
Our great sponsors
| pspy | PEASS-ng | |
|---|---|---|
| 8 | 90 | |
| 4,510 | 14,874 | |
| - | 2.9% | |
| 0.0 | 8.5 | |
| over 1 year ago | 9 days ago | |
| Go | C# | |
| GNU General Public License v3.0 only | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pspy
-
Ask HN: What's the big deal with Go (Golang)?
* https://github.com/DominicBreuker/pspy
When you deploy them they just work. Compare that to compiled C++ code you often face issues with the deployment in my experience. And production machines usually do not ship compilers.
-
Need help getting rid of malware "perfcc / perfctl"
Configure auditd to log everything. Then use ausearch and aureport to inspect the events. You could also configure rsyslog to send the logs to a remote grafana server. There're a lot of tools you could use: falco, tracee, osquery, go-auditd+elastic, pspy , ...
-
LinPEAS
Literally using this right now on a pentest looking for privesc in some Linux boxes - the great thing about this tool is it's a shell script that's portable and does a significant amount of enumeration - big time saver. Feel as if it's better then the most others out there.
The second go-to tool after Linpeas is pspy which "allows you to see commands run by other users, cron jobs, etc. as they execute" [1]
[1] https://github.com/DominicBreuker/pspy
-
Tips to improve speed during CTFs
skipping processes (use tools such as pspy)
-
I passed with 100 points on second attempt AMA
I also forgot https://github.com/DominicBreuker/pspy obviously for linux privesc
-
What are some underrated (legal) tools that you have used during the OSCP that no one talks about or knows?
-
Startup CTF room, priv esc
It’s not in crontab either. You need to use a tool like pspy to find it.
-
alpha-sudo - my first emacs package
All you need to do is run a tool like ps or top often enough and eventually you'll catch a short-lived process exposing sensitive data in its command line. In fact, people wrote specialized scripts doing that at fast enough speed to catch them: https://github.com/DominicBreuker/pspy
PEASS-ng
-
Great enumeration scripts?
Once on a system, something like Linpeas or Winpeas would be useful: https://github.com/carlospolop/PEASS-ng
-
HackersToolKit.co - One-Stop Shop for Tool Commands for CTFs, bug bounty, and Penetration Testing
Reject internet, embrace man. TBH it is not usefull at all, it is just in manual or embedded in kali, like basic webshells for example. It is cool to do such thing as a little free time project to learn about hosting and developing a website, but usefulnes for broader audience is minimal I think. For everyday use https://book.hacktricks.xyz are the best in my opinion.
-
Allowed tools for OSCP
I'm taking my OSCP exam next Wednesday and was just wondering on what tools are actually prohibited and which are not. I'm specifically referring to linpeas, winpeas, seatbelt. I often times run these tools when I've exausted my enumeration methods for a quick find. Are these tools allowed on the AD set and the individual machines?
-
Qualified to write a technical book ?
Seems like a cart before horse situation. Why not just release the cheat sheet you have now and see how it does? I like Carlos Polop's approach with HackTricks -- https://book.hacktricks.xyz/ -- he offers previews of new content to his patrons.
-
For cycle inside a list
Hi I don't understand the self.files attribute in this code: https://github.com/carlospolop/PEASS-ng/blob/master/linPEAS/builder/src/fileRecord.py
- LinPEAS
-
What are the alternative tools for wmic on cmd?
I'd recommend poking around at github and see what you find. A good starting point is WinPEAS if you're looking for automation. Seatbelt might also be helpful
- What are the alternatives for wmic on cmd?
- Need an ex OSCP candidate to share their experiences.
-
Hack The Box - Vessel [Hard] - Walkthrough
Using linpeas I found some useful information over the user steven
What are some alternatives?
hackenv - Manage and access your Kali Linux or Parrot Security VM from the terminal (SSH support + file sharing, especially convenient during CTFs, Hack The Box, etc.) :rocket::wrench:
lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
traitor - :arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
warp-plus-cloudflare - Script for getting unlimited GB on Warp+ ( https://1.1.1.1/ ) [GET https://api.github.com/repos/ALIILAPRO/warp-plus-cloudflare: 403 - Repository access blocked]
PrivEsc-MindMap
pimpmykali - Kali Linux Fixes for Newly Imported VM's
feroxbuster - A fast, simple, recursive content discovery tool written in Rust.
CCStopper - [Archived] Stops Adobe's pesky background apps and more 😉
OSCP-Priv-Esc - Mind maps / flow charts to help with privilege escalation on the OSCP.
GTFONow - Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
linux-smart-enumeration - Linux enumeration tool for pentesting and CTFs with verbosity levels
PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF