diff --git a/linPEAS/README.md b/linPEAS/README.md index 999315b..bab1c1f 100644 --- a/linPEAS/README.md +++ b/linPEAS/README.md @@ -210,6 +210,7 @@ file="/tmp/linPE";RED='\033[0;31m';Y='\033[0;33m';B='\033[0;34m';NC='\033[0m';rm - [x] Redis - [x] Dovecot - [x] Mosquitto + - [x] Neo4j - **Generic Interesting Files** diff --git a/linPEAS/linpeas.sh b/linPEAS/linpeas.sh index 2ba112b..bc825ed 100644 --- a/linPEAS/linpeas.sh +++ b/linPEAS/linpeas.sh @@ -1,6 +1,6 @@ #!/bin/sh -VERSION="v2.3.1" +VERSION="v2.3.2" ADVISORY="linpeas should be used for authorized penetration testing and/or educational purposes only. Any misuse of this software will not be the responsibility of the author or of any other collaborator. Use it at your own networks and/or with the network owner's permission." ########################################### @@ -1333,7 +1333,7 @@ if [ "`echo $CHECKS | grep SofI`" ]; then adhashes=`ls "/var/lib/samba/private/secrets.tdb" "/var/lib/samba/passdb.tdb" "/var/opt/quest/vas/authcache/vas_auth.vdb" "/var/lib/sss/db/cache_*" 2>/dev/null` printf $Y"[+] "$GREEN"Looking for AD cached hahses\n"$NC if [ "$adhashes" ]; then - ls "/var/lib/samba/private/secrets.tdb" "/var/lib/samba/passdb.tdb" "/var/opt/quest/vas/authcache/vas_auth.vdb" "/var/lib/sss/db/cache_*" 2>/dev/null + ls -l "/var/lib/samba/private/secrets.tdb" "/var/lib/samba/passdb.tdb" "/var/opt/quest/vas/authcache/vas_auth.vdb" "/var/lib/sss/db/cache_*" 2>/dev/null else echo_not_found "cached hashes" fi echo "" @@ -1410,6 +1410,17 @@ if [ "`echo $CHECKS | grep SofI`" ]; then fi done echo "" + + ##-- 37SI) Neo4j + printf $Y"[+] "$GREEN"Looking for neo4j auth file\n"$NC + neo4j=`find /var /etc /home /root /tmp /usr /opt -type d -name "neo4j" 2>/dev/null` + for d in $neo4j; do + if [ -r $d ]; then + echo "Found readable $d" + find $d -type f -name "auth" -exec cat {} \; 2>/dev/null | sed "s,.*,${C}[1;31m&${C}[0m," 2>/dev/null + fi + done + echo "" echo "" fi