Skip to content

v0.4.4

Compare
Choose a tag to compare
@github-actions github-actions released this 28 Nov 21:38
· 82 commits to master since this release

Changelog

Fixed

  • Possible exception due to pre-registering of session with manager
  • Covered edge case in sudo rule parsing for wildcards (#183)
  • Added fallthrough cases for PTY methods in case of misbehaving binaries (looking at you: screen)
  • Fixed handling of socket.getpeername when Socket channel uses IPv6 (#159).
  • Fixed verbose logging handler to be unique for every channel
  • Fixed docstrings in Command modules
  • Changed docker base image to python3.9-alpine to fix python version issues.
  • Added logic for calling correct paramiko method when reloading an encrypted SSH privat ekey (#185).
  • Forced Stream.RAW for all GTFOBins interaction (#195).
  • Added custom which implementation for linux when which is not available (#193).
  • Correctly handle --listen argument (#201)
  • Added handler for OSError when attempting to detect the running shell (#179)
  • Added additional check for stat time of file birth field (#208)
  • Removed shell compare with ["nologin", "false", "sync", "git-shell"] (#210)
  • Added shell compare with not in ["bash", "zsh", "ksh", "fish"] (#210)

Added

  • Added alternatives to bash to be used during shell upgrade for a better shell
  • Added a warning message when a KeyboardInterrupt is caught
  • Added --verbose/-V for argument parser
  • Added OSError for bind protocol to show appropriate error messages
  • Contributing guidelines for GitHub maintainers
  • Installation instructions for BlackArch
  • Added lpwd and lcd commands to interact with the local working directory (#218)

Changed

  • Removed handling of shell argument to Popen to prevent euid problems (#179)
  • Changed some 'red' warning message color to 'yellow'
  • Leak private keys for all users w/ file-read ability as UID=0 (#181)
  • Raise PermissionError when underlying processes terminate unsuccessfully for LinuxReader and LinuxWriter
  • Removed busybox and bruteforce commands from documentation.

Full Changelog