search

peass-ng / PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
https://book.hacktricks.xyz
Other
15.73k stars 3.05k forks source link

Linpeas thinks it is running as root when there is no /usr/bin/id executable #229

Closed CyberSecurityN00b closed 2 years ago

CyberSecurityN00b commented 2 years ago

Issue description

Running linpeas.sh on a system without the /usr/bin/id binary causes the script to believe itself to be running as root, regardless of whether it actually is.

Steps to reproduce the issue

  1. Run linpeas.sh on a system without /usr/bin/id (such as Android)

Which parameters did you use for executing the script and how did you execute it?

No parameters. Executed with sh linpeas.sh

If winpeas, did you use a clean or obfuscated winpeas, and for which architecture?

N/A

Is there any AV / Threat protection in the system?

N/A / UNK

Please, indicate the OS, the OS version, and the kernel version (build number in case of Windows)

Linux 4.9.214-android-x86_64-g04f9324

Please, indicate the check that is failing and add a screenshot showing the problem

N/A

How did you expect it to work?

The script was not run as the root user, so it should not assume that it is root.

Additional details / screenshot

N/A

carlospolop commented 2 years ago

Hi @CyberSecurityN00b, I have added these new checks for root: https://github.com/carlospolop/PEASS-ng/pull/230/commits/93fd84a1d030da582a312ac8aa98e53a21f8e2dc Do you have any other suggestion to check if the current user is root? (It should work with sh)

CyberSecurityN00b commented 2 years ago

Looks good, can't think of anything else off the top of my head. Thanks!