From 025ea842396cab2aad3720052bbd0edea7d658c4 Mon Sep 17 00:00:00 2001 From: brightio Date: Mon, 31 Jan 2022 11:24:34 +0100 Subject: [PATCH 1/3] Fix a few typos in README.md --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index b070c0b..049f163 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@ # Linuxprivchecker.py ## A Linux Privilege Escalation Check Script [![Known Vulnerabilities](https://snyk.io/test/github/sleventyeleven/linuxprivchecker/badge.svg?targetFile=requirements.txt)](https://snyk.io/test/github/sleventyeleven/linuxprivchecker?targetFile=requirements.txt) -### Orginal Author: Mike Czumak (T_v3rn1x) -- @SecuritySift +### Original Author: Mike Czumak (T_v3rn1x) -- @SecuritySift ### Current Maintainer: Michael Contino (@Sleventyeleven) This script is intended to be executed locally on a Linux box to enumerate basic system info and @@ -14,7 +14,7 @@ Linuxprivchecker is designed to identify potential areas to investigate further, This is to help users further learn how these privilege escalations work and keep it in line with the rules, for self directed exploitation, laid out for the OSCP, HTB, and other CTFs/exams. -We will try our best to addtional information and reference where possible. As the current Maintainer, +We will try our best to provide additional information and reference where possible. As the current Maintainer, I also plan to accompany new feature adds, with a post on my blog (hackersvanguard.com) to further explain each potential area for privilege escalation and what criteria may be required. @@ -33,7 +33,7 @@ To run the python 3 version, just utilize pip. `pip install linuxprivchecker` -Then just run via commandline if runpy is available. +Then just run via command line if runpy is available. `linuxprivchecker -w -o linuxprivchecker.log` @@ -54,7 +54,7 @@ Try to gather system information and find likely exploits optional arguments: -h, --help show this help message and exit - -s, --searches Skip time consumming or resource intensive searches + -s, --searches Skip time consuming or resource intensive searches -w, --write Wether to write a log file, can be used with -0 to specify name/location From 4d959d2275d6cf40330741de236425decbdd591a Mon Sep 17 00:00:00 2001 From: brightio Date: Mon, 31 Jan 2022 11:30:04 +0100 Subject: [PATCH 2/3] Fix a few typos in linuxprivchecker.py --- linuxprivchecker.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/linuxprivchecker.py b/linuxprivchecker.py index 56136b0..7c6b06d 100755 --- a/linuxprivchecker.py +++ b/linuxprivchecker.py @@ -18,8 +18,8 @@ ############################################################################################################### TODO: Add search for writable and/or missing library files -Add detection and enumeratation for systemd -Add search for accessiable ssh sockets +Add detection and enumeration for systemd +Add search for accessible ssh sockets Add search for ssh keys Add search for know access tokens Expand Sudo support to include rules in sudoers.d @@ -561,8 +561,8 @@ def find_likely_exploits(sysinfo, devtools, pkgsandprocs, driveinfo): # Parse out all of the command line arguments parser = argparse.ArgumentParser(description='Try to gather system information and find likely exploits') - parser.add_argument('-s', '--searches', help='Skip time consumming or resource intensive searches', required=False, action='store_true') - parser.add_argument('-w', '--write', help='Wether to write a log file, can be used with -0 to specify name/location ', required=False, action='store_true') + parser.add_argument('-s', '--searches', help='Skip time consuming or resource intensive searches', required=False, action='store_true') + parser.add_argument('-w', '--write', help='Whether to write a log file, can be used with -0 to specify name/location ', required=False, action='store_true') parser.add_argument('-o', '--outfile', help='The file to write results (needs to be writable for current user)', required=False, default='linuxprivchecker.log') args = parser.parse_args() From 61a593a1556c59cf93edcc216ca97dd72163c92e Mon Sep 17 00:00:00 2001 From: brightio Date: Mon, 31 Jan 2022 11:30:55 +0100 Subject: [PATCH 3/3] Fix a typo in README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 049f163..d023678 100644 --- a/README.md +++ b/README.md @@ -56,7 +56,7 @@ optional arguments: -s, --searches Skip time consuming or resource intensive searches - -w, --write Wether to write a log file, can be used with -0 to + -w, --write Whether to write a log file, can be used with -0 to specify name/location -o OUTFILE, --outfile OUTFILE