ocLE4P

Table of contents

1️⃣ Introduction:
2️⃣ User documentation:
- #️⃣ Setup
- #️⃣ Usage
3️⃣ Unit Tests:
- #️⃣ 'mdcvxiv.py' test
4️⃣ Plugins:
- #️⃣ "mdcvxiv.py" plugins

Introduction:

ocLE4P is a customizable Local Enumeration and Privilege Escalation tool based on Python. Everyone can write their own plugins by following the template files and including the plugins into the ocLE4P.py file. The enumeration plugins in mdcvxiv.py also support non-interactive shells. The non-interactive options give the user file with the output of the chosen enumeration.

What is Local Enumeration? Local Enumeration is ordering in a list, specific assets of a system. That might be the running processes of the system, the version of the drivers, users of the system etc. What is Privilege Escalation? Privilege Escalation is escalating the rights of low privilege user to one with higher rights or root.

User documentation:

Setup

Usage

Unit Tests:

'mdcvxiv.py' test

Function	Test	Expected result
fileIn()	Open log file	True
fileIn()	Check the functionality with simulated plugin	True
interactive()	Pass incorect argument and chacks for "Incorrect argument!"	True
interactive()	Pass two arguments and chacks for "Only one argument is required!"	True
interactive()	Check is every available option printed	True
interactive()	Open log file (insurance for correctly called function)	True
interactive()	Chacks if the options are written	True
TempFile().gen()	Checks if file is generated	True
TempFile().gen()	Checks if file is deleted	True

Plugin	Test	Expected result
All plugins	Checks is the plugin instance of plugins.Enumeration or plugin.PrivEsc	True
All plugins	Checks is the plugin instance of plugins.Items	True
All plugins	Checks is "Nick" is in plug.info()	True
All Enumerations plugins	Checks is content len grater than 0	True
SysServUNIX	Is the output of "whoami" in content	True
SysServUNIX	Is the output of "hostnamectl" in content	True
SysServUNIX	Is the output of "echo $XDG_CURRENT_DESKTOP" in content	True
SysServUNIX	Is the output of "systemctl list-units --type=service --state=running" in content	True
SysServUNIX	Is the output of "systemctl list-units --type=service --all" in content	True
SysServUNIX	Is the output of "systemctl list-unit-files" in content	True
POPS_UNIX	Is the first line of "ps -eF grep root" in content	True
POPS_UNIX	Is the first line of "ps -eF" in content	True
POPS_UNIX	Is the error message of "netstat -antup" in content	True
POPS_UNIX	Is the output of "cat /etc/passwd" in content	True
POPS_UNIX	Is the output of "grep -v /etc/passwd" in content	True
POPS_UNIX	Is the output of 'echo -e "$grpinfo" grep "(adm)"' in content	True
POPS_UNIX	Is the output of "grep -v -E '^#' /etc/passwd awk -F: '$3 == 0 { print $1}'" in content	True
POPS_UNIX	Is the error message of "grep -v -e '^$' /etc/sudoers grep -v '#'" in content	True
POPS_UNIX	Is the error message of "ls -ahl /root/" in content	True
POPS_UNIX	Is the error message of "echo '' sudo -S -l -k" in content	True
SUID_check()	Is the output of SUID_check("vim") in "find / -perm -u=s -type f 2> /dev/null"	True
SUID_check()	Is the output of SUID_check("grep") in "find / -perm -u=s -type f 2> /dev/null"	True
SysServWIN	Is the output of "whoami" in content	True
SysServWIN	Are th first 15 lines of "systeminfo" in content	True
SysServWIN	Is the output of "sc queryex type= service" in content	True
SysServWIN	Is the output of "sc queryex type= service state= all" in content	True
SysServWIN	Is the output of "ls -ahl /root/" in content	True
SysServWIN	Is the output of "sc queryex type= driver" in content	True

Plugins:

mdcvxiv.py

<--------------ENUMERATION-------------->

SysServUNIX

POPS_UNIX

SysServWIN

<----------------PrivEsc---------------->

vim_UNIX

grepSHADOW

contehj/ocLEAP

About

Resources

Stars

Watchers

Forks

Releases

Contributors 3

Languages