Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The to-do list #19

Open
14 tasks done
rootm0s opened this issue Mar 13, 2019 · 24 comments
Open
14 tasks done

The to-do list #19

rootm0s opened this issue Mar 13, 2019 · 24 comments
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@rootm0s
Copy link
Owner

rootm0s commented Mar 13, 2019

The to-do list:

  • Update all the "print_" messages so they make more sense
  • Update all function descriptions so they are correct
  • Update README
  • A better way to do cleanup. Right now.. if function returns False in early stage, this prevents the cleanup in most of the functions. (Fixed in: f8dd0a6)
  • Restructure winstructures, it's all messy right now
  • Convert the code to python3 but keep python2 support so Pupy (https://github.com/n1nj4sec/pupy) can work
  • Add automated testing (Travis CI, AppVeyor, etc.)
  • Replace all sys.argv[] calls from main.py and use argparse instead (Fixed in: 7de4146)
  • Deprecate py2exe support
  • Remove py2exe from README
  • Add better way to display the scan results
  • Change Syntax winpwnage.py in README to main.py
  • Deprecate DLL based methods/functions
  • Remove Python2 support
@rootm0s rootm0s added the help wanted Extra attention is needed label Mar 13, 2019
@rootm0s rootm0s pinned this issue Mar 13, 2019
@rootm0s rootm0s mentioned this issue Mar 20, 2019
@cclauss
Copy link
Contributor

cclauss commented Mar 20, 2019

  • Add automated testing (CircleCI, Travis CI, AppVeyor, etc.)?

@rootm0s
Copy link
Owner Author

rootm0s commented Mar 20, 2019

  • Add automated testing (CircleCI, Travis CI, AppVeyor, etc.)?

I do all the testing manually at the moment. I don't use any of those since there's no version-handling on this project. Is it simular to unittest?

@cclauss
Copy link
Contributor

cclauss commented Mar 20, 2019

These are automated tools that test each pull request before it is reviewed. One of the tests that they could run could be unittests. They could also run other test frameworks (pytest) and linters (pylint, flake8, mypy, etc).

CPython runs several (click Show all checks):

@rootm0s
Copy link
Owner Author

rootm0s commented Mar 20, 2019

Alright, thanks for the info. I'll add it to the todo!

@rootm0s
Copy link
Owner Author

rootm0s commented Mar 21, 2019

Followed your steps and merged the PR @cclauss - let me know if I missed something, im new to Travis Ci.

@cclauss
Copy link
Contributor

cclauss commented Mar 21, 2019

Tests are running now... #23

@rootm0s
Copy link
Owner Author

rootm0s commented Mar 21, 2019

Merged #23 as well

@cclauss
Copy link
Contributor

cclauss commented Mar 21, 2019

Nice work! So the rule going forward should be: If Travis is not green, the PR should not be merged.

@cclauss
Copy link
Contributor

cclauss commented Mar 21, 2019

You can check the last box in the list above.

@rootm0s
Copy link
Owner Author

rootm0s commented Mar 21, 2019

Nice work! So the rule going forward should be: If Travis is not green, the PR should not be merged.

Alright, good to know. Thanks!

You can check the last box in the list above.

Done!

@cclauss
Copy link
Contributor

cclauss commented Mar 23, 2019

Is it time to check the second last box above?

@rootm0s
Copy link
Owner Author

rootm0s commented Mar 23, 2019

Is it time to check the second last box above?

It is, going too! Thanks for all the help so far. Really appreciated!

@rootm0s rootm0s closed this as completed Mar 23, 2019
@rootm0s rootm0s reopened this Mar 23, 2019
@rootm0s
Copy link
Owner Author

rootm0s commented Mar 23, 2019

Missclick, lol.

@rootm0s rootm0s unpinned this issue Apr 18, 2019
@rootm0s rootm0s pinned this issue Apr 18, 2019
@rootm0s
Copy link
Owner Author

rootm0s commented Aug 29, 2019

Restructure of winstructures is completed in PR 5cd9c8b

@rootm0s rootm0s unpinned this issue Mar 28, 2020
@rootm0s
Copy link
Owner Author

rootm0s commented Mar 29, 2020

Readme got updated in: c7d895d

@rootm0s
Copy link
Owner Author

rootm0s commented Mar 29, 2020

@cclauss Is it possible for Travis-ci to ignore colorama import if it's not being used? And just only colorama.

https://travis-ci.com/github/rootm0s/WinPwnage/jobs/307519521

Edit:
Is now fixed.

@rootm0s
Copy link
Owner Author

rootm0s commented Apr 6, 2020

Added:

  • Deprecate DLL based methods/functions

Reason:
Cannot support DLL based methods because I don't have the time to create proxy dll's and test existing functions and new functions. These methods are also quite messy in my opinion, payload can get stuck on disk while using UAC bypass method because the DLL was not unloaded correctly.

@rootm0s rootm0s added the enhancement New feature or request label Apr 6, 2020
@psyraed
Copy link

psyraed commented Apr 9, 2020

#53

Used pyinstaller --onefile main.py to make main.exe

Whn i run it: main.exe -scan

C:\Users\Usuari\Desktop\WinPwnage-master\dist>main.exe -scan

[!] Comparing build number (18363) against 'Fixed In' build numbers

Id: Type: Compatible: Description:


No any scan provided

Thanks for help and congrats )

@rootm0s
Copy link
Owner Author

rootm0s commented Apr 10, 2020

#53

Used pyinstaller --onefile main.py to make main.exe

Whn i run it: main.exe -scan

C:\Users\Usuari\Desktop\WinPwnage-master\dist>main.exe -scan

[!] Comparing build number (18363) against 'Fixed In' build numbers

Id: Type: Compatible: Description:

No any scan provided

Thanks for help and congrats )

You need to specify if you want to search for uac/persist/elevate methods.

main.exe -scan uac
main.exe -scan persist
main.exe -scan elevate

@cclauss
Copy link
Contributor

cclauss commented Apr 10, 2020

It would be good if the software would display a clear warning if the user forgets to specify a search. Or it could execute a reasonable default.

@psyraed
Copy link

psyraed commented Apr 10, 2020

#53
Used pyinstaller --onefile main.py to make main.exe
Whn i run it: main.exe -scan
C:\Users\Usuari\Desktop\WinPwnage-master\dist>main.exe -scan
[!] Comparing build number (18363) against 'Fixed In' build numbers
Id: Type: Compatible: Description:
No any scan provided
Thanks for help and congrats )

You need to specify if you want to search for uac/persist/elevate methods.

main.exe -scan uac
main.exe -scan persist
main.exe -scan elevate

Hi )
Thanks for answering
Tried whith all, ( uac , persist , elevate) but no any scan.

seems maybe soft don't find the scripts to us or similar ?

thnx again

@rootm0s
Copy link
Owner Author

rootm0s commented Apr 10, 2020

It would be good if the software would display a clear warning if the user forgets to specify a search. Or it could execute a reasonable default.

Agree, would be more user friendly. Or just add it to the README, some scan arguments so people understand how it works.

It does say it expect one more argument if only passing --scan/-s to main.py.

usage: main.py [-h] [-s SCAN [SCAN ...]] [-u USE [USE ...]] [-i ID [ID ...]] [-p PAYLOAD [PAYLOAD ...]] [-r]
main.py: error: argument -s/--scan: expected at least one argument

@rootm0s
Copy link
Owner Author

rootm0s commented Apr 10, 2020

#53
Used pyinstaller --onefile main.py to make main.exe
Whn i run it: main.exe -scan
C:\Users\Usuari\Desktop\WinPwnage-master\dist>main.exe -scan
[!] Comparing build number (18363) against 'Fixed In' build numbers
Id: Type: Compatible: Description:
No any scan provided
Thanks for help and congrats )

You need to specify if you want to search for uac/persist/elevate methods.
main.exe -scan uac
main.exe -scan persist
main.exe -scan elevate

Hi )
Thanks for answering
Tried whith all, ( uac , persist , elevate) but no any scan.

seems maybe soft don't find the scripts to us or similar ?

thnx again

Create a separate issue here on Github and provide what python version you run, will try to help you.

It works locally here in 3 different VMs, also Travis CI is able to build and use the scan functions. Don't think it's a WinPwnage bug.

@rootm0s
Copy link
Owner Author

rootm0s commented Apr 10, 2020

It would be good if the software would display a clear warning if the user forgets to specify a search. Or it could execute a reasonable default.

Added some examples to README for now:
a8ddf84

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

3 participants