justicerage / freedomfighting Goto Github PK

Hey,

awesome tools :)

I think in the nojail.py is the regex incomplete, e.g. /var/log/auth will not be cleaned while testing.
Line: 340 "-regex", ".*.log(.[0-9]+)(.gz)?$"],

I changed it to: "-regex", "..log|..log(.[0-9]+)(.gz)?$"],
[*] 32 lines removed from /var/log/auth.log!

Per @z0vsky: https://twitter.com/Z0vsky/status/819576069305077762

Ran into this issue while testing the script. Worked fine a few times, then halfway through cleaning some logs i got a crash like this, then it continues to crash. IP and hostnames replaced as they are not relevant.

root@generic_host_name:~# python nojail.py -i x.x.x.x -n x.x.x.x
[ ] Cleaning logs for sjkgxd (x.x.x.x - x.x.x.x).
[ ] No entries to remove from /var/run/utmp.
[ ] No entries to remove from /var/log/wtmp.
[ ] No entries to remove from /var/log/btmp.
Traceback (most recent call last):
  File "nojail.py", line 601, in <module>
    clean_lastlog(LINUX_LASTLOG_FILE, args.user, args.ip, args.hostname)
  File "nojail.py", line 331, in clean_lastlog
    clean_file += f.read()
MemoryError

Any ideas? The system was nowhere close to out of memory.

Thanks

argparse was only introduced in Python 2.7 and this script may need to run on older machines where only a 2.6 interpreter is provided.
As such, the dependency to argparse should be removed to ensure that more platforms are supported.

Add a new script which crawls target website and extracts all the URLs to generate a sitemap.
The script is currently being prototyped in a gist, any feedback is welcome.

The crawling script should be able to retrieve POST parameters from forms and show them to the user with their default value if any.

Hi,

I could not figur out why but the first ssh connection to the host is not recognized by the script.
Perhaps you have an idea.

Kind regards,
helo

I don't know why I get this error while trying to retrieve a test file (on Debian 8 x64):

$ ./share.sh -d 7 /tmp/lol superkey
Success! Retrieval command: ./share.sh -r lol "superkey" https://transfer.sh/OXr9D/3162
$ ./share.sh -r lol "superkey" https://transfer.sh/OXr9D/3162
error reading input file

gzip: stdin: unexpected end of file