Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Order payloads by exploitability and impact #16

Merged
merged 16 commits into from
Dec 4, 2023
Merged

feat: Order payloads by exploitability and impact #16

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
1bad320
feat: Order payloads by exploitability and impact
Frissi0n Dec 3, 2023
d29b742
feat: Add autorun mode (-a), for interactionless execution
Frissi0n Dec 3, 2023
d4e7eba
feat: Add autorun mode for single command mode
Frissi0n Dec 3, 2023
f834c2e
Test: debugging workflows
Frissi0n Dec 3, 2023
00327fc
Test: debugging workflows
Frissi0n Dec 3, 2023
7288f8b
Test: debugging workflows
Frissi0n Dec 3, 2023
6be5df7
Test: debugging workflows
Frissi0n Dec 3, 2023
027ef18
Test: debugging workflows
Frissi0n Dec 3, 2023
84f5c22
Test: debugging workflows
Frissi0n Dec 3, 2023
1ed2936
Test: debugging workflows
Frissi0n Dec 3, 2023
43826e4
Test: debugging workflows
Frissi0n Dec 3, 2023
602d644
fix: Python 2 compatibility issue
Frissi0n Dec 3, 2023
0977b12
Test: debugging workflows
Frissi0n Dec 3, 2023
d336561
Fix python2 test case compatibility
Frissi0n Dec 4, 2023
d5799c9
Fix python2 test case compatibility
Frissi0n Dec 4, 2023
33ca0b3
Install mock dependency
Frissi0n Dec 4, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions .github/workflows/docker-pytest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,9 +26,10 @@ jobs:
- name: Run tests
run: |
docker run --name gtfonow_test_${{ matrix.python-version }} -d gtfonow_test:${{ matrix.python-version }}

- name: Wait
run: sleep 15
- name: Run Pytest
run: docker exec gtfonow_test_${{ matrix.python-version }} su -l lowpriv -c "pytest -v --cov=gtfonow --cov-report=xml --cov-report=term-missing"
run: docker exec -u lowpriv gtfonow_test_${{ matrix.python-version }} pytest -v --cov=gtfonow --cov-report=xml --cov-report=term-missing
- name: Copy coverage report from Docker container to host
run: docker cp gtfonow_test_${{ matrix.python-version }}:/home/lowpriv/coverage.xml .

Expand Down
6 changes: 4 additions & 2 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,10 +23,12 @@ RUN chmod u+s $(which tee)
RUN chmod u+s $(which dd)
RUN chmod u+s $(which mv)
RUN chmod u+s $(which rbash)

RUN pip install mock
RUN useradd -ms /bin/bash lowpriv
RUN useradd -ms /bin/bash higherpriv

RUN ssh-keygen -N '' -f /root/.ssh/id_rsa
RUN cp /root/.ssh/id_rsa.pub /root/.ssh/authorized_keys
RUN echo "ONLY_ROOT_CAN_READ_THIS" > /root/proof.txt
RUN echo "lowpriv ALL=(ALL) NOPASSWD: /usr/bin/head" >> /etc/sudoers
RUN echo "lowpriv ALL=(higherpriv) NOPASSWD: /usr/bin/vim" >> /etc/sudoers

Expand Down
Loading