Automated Script to install Covenant on Ubuntu 20.04

Following on from my previous post I have created a noddy script to install Covenant on an Ubuntu 20.04 box. It can be found at : https://github.com/CluelessAtCoding/Efforts/tree/main/RedTeamTools Download the script to the Ubuntu machine, change the username specified at the beginning of the script if you so wish, then:

Installing Covenant on Ubuntu 20.04

Understanding how Red Team tools work and are used enables the Blue Team to develop better detections in their EDR/Security software. This short article details how to install Covenant (https://github.com/cobbr/Covenant) on Ubuntu 20.04 so you can use it as part of a Purple Team exercise. Build a minimal Ubuntu 20.04 Server, with OpenSSH Server installedContinue reading “Installing Covenant on Ubuntu 20.04”

CVE-2021-4034 – Polkit Vulnerability

With Proof of Concept exploits already on github, you need to ensure you are patched against this vulnerability. Details of the vulnerability can be found at https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 Most vendors have released patches, so update

Who, What and Why?

As an Cyber Security / IT Professional I spend a lot of time looking for solutions to IT issues that I have at work and home. Some of the solutions are easy to find, some are most definitely not. What they often have in common is that they evolve. The purpose of this site isContinue reading “Who, What and Why?”