blendin / 3snake Goto Github PK

Does 3snake have support for Solaris (11.4)? When I attempt to execute it I see this error:

bash-5.0#  ./3snake
bash: ./3snake: Invalid argument

Some Googling suggests that its an architecture issue (running an "x86 binary on a SPARC machine").

However, when I run file on 3nsake, I see:

bash-5.0#  file 3snake
3snake:             ELF 64-bit LSB dynamic lib AMD64 Version 1, position-independent executable, dynamically linked, not stripped, no debugging information available`

And as far as I can tell, Solaris is x64 architecture:

bash-5.0#  isainfo -v
64-bit sparcv9 applications
        vis3c vis3b crc32c cbcond pause mont mpmul sha512 sha256
        sha1 md5 camellia kasumi des aes ima hpc vis3 fmaf
        asi_blk_init vis2 vis popc fsmuld div32 mul32
32-bit sparc applications
        vis3c vis3b crc32c cbcond pause mont mpmul sha512 sha256
        sha1 md5 camellia kasumi des aes ima hpc vis3 fmaf
        asi_blk_init vis2 vis popc v8plus fsmuld div32 mul32

Any suggestions?

Hey there! Sudo password capture doesn't seem to work on centos 6.2 x64. Older Red Hat based systems are super common on pentests so it would be great if this tool worked on them. Sshd sniffing works.

[user1@centos6 root]$ sudo -i
[sudo] password for user1: 
[root@centos6 ~]# whoami
root
[root@centos6 ~]# 

No result:

[root@centos6 3snake]# ./3snake 
[user1] 8266 sudo -i 	

I'm running 3snake on a Fedora 36 system.
Thanks!

When running 3snake with -o giving a relative path, ie sudo ./3snake -d -o "output.txt", no output file is generated. If an absolute path is given, ie sudo ./3snake -d -o "/tmp/output.txt" then one is. This makes me assume that 3snake is not accounting for its path when it is ran. I suggest one of the following

1. Change the -h and README to mention 3snake needing an absolute path
2. Change 3snake functionality to account for relative paths when outputting to a file.

3snake doesn't support Centos. This is likely because of some weird ptrace differences in the Kernel.

More details in #2

Hi,
I tested 3snake on Ubuntu 16.04.3 (64 bit) and I noticed that sshd tracing is not capturing the password. Sudo tracing works fine.

First to say thanks for this great job
Is there any way to capture only valid credentials?