moscow chill
336c53a163
Fix ANSI escape codes displaying as literal text in winPEAS.bat
...
The script was setting E=0x1B[ as a literal string instead of the actual
ESC character (ASCII 27), causing color codes to display as text like
"0x1B[33m[+]0x1B[97m" instead of rendering as colors.
Changed the SetOnce subroutine to properly capture the ESC character using
the 'prompt $E' technique before building the ANSI escape sequence prefix.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-10-29 20:16:34 +01:00
moscow chill
29d8132d93
Fix winPEAS.bat compatibility with Windows 11 and modern Windows 10
...
WMIC has been deprecated since Windows 10 20H1 and removed in Windows 11.
The script was exiting early when WMIC commands failed instead of continuing.
Changes:
- Add proper WMIC existence checks using 'where wmic' before execution
- Implement PowerShell fallbacks for all WMIC commands
- Fix hotfix enumeration (Get-HotFix)
- Fix antivirus detection (Get-CimInstance)
- Fix mounted disk enumeration (Get-PSDrive)
- Fix running process checks (Get-Process)
- Fix service binary permission checks (Get-CimInstance Win32_Service)
- Add error suppression (2>nul) to conditional WMIC exploit checks
The script now properly detects WMIC availability and falls back to
PowerShell equivalents, ensuring full functionality on modern Windows
systems while maintaining backward compatibility with older systems.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-10-27 16:10:42 +01:00
CravateRouge
b8b4a0fc14
Fix InterfaceFlags syntax
2025-10-07 11:14:45 +08:00
CravateRouge
7042a182df
Add ADCS ESC DC registry checks
2025-10-06 17:18:44 +02:00
jtothef
7c9f431649
Update README.md
...
Fix typo
2025-09-23 12:49:05 -05:00
SirBroccoli
215c5d074e
Merge pull request #456 from peass-ng/dependabot/nuget/winPEAS/winPEASexe/Tests/System.Text.RegularExpressions-4.3.1
...
Bump System.Text.RegularExpressions from 4.3.0 to 4.3.1 in /winPEAS/winPEASexe/Tests
2025-09-03 13:36:40 +02:00
SirBroccoli
46264bf239
Merge pull request #497 from peass-ng/update_PEASS-winpeas-HTB_Sendai__From_password_spray_to_g_20250828_184040
...
[WINPEAS] Add privilege escalation check: HTB Sendai From password spray to gMSA d...
2025-09-03 13:31:10 +02:00
HackTricks News Bot
54d861ab04
Add winpeas privilege escalation checks from: HTB Sendai: From password spray to gMSA dump, then ADCS ESC4 or SQL+Silver Ticke
2025-08-28 18:51:59 +00:00
HackTricks News Bot
bbb932d6d3
feat(winpeas): add ActiveDirectoryInfo check (gMSA readable passwords, AD CS template rights) and include in project
2025-08-28 18:50:51 +00:00
HackTricks News Bot
626ea2d298
docs(usage): add activedirectoryinfo option to usage output
2025-08-28 18:50:22 +00:00
HackTricks News Bot
c314cfd23d
Add winpeas privilege escalation checks from: HTB: TheFrizz (High-level, redacted for safety)
2025-08-27 19:14:43 +00:00
securitytime
933e12d7f1
Update Beaprint.cs
...
A space character is missing here:
"... educational purposes only.Any misuse of this software ..."
2025-06-28 09:12:40 +02:00
Signum21
d335b9254f
Fixed multiple bugs in Vulnerable Leaked Handlers
2025-06-15 20:59:20 +02:00
Signum21
f62d9fc550
Fix System.Security.Principal.IdentityNotMappedException in Vulnerable Leaked Handlers
2025-05-31 04:56:14 +02:00
carlospolop
aab8241ede
f
2025-05-25 02:21:39 +02:00
carlospolop
65b98d11ac
only print errors when relevant
2025-05-25 02:10:07 +02:00
carlospolop
1e72dbeb76
impr winpeas networking checks
2025-05-25 01:46:30 +02:00
carlospolop
c9282b4bdb
fix winpeas?
2025-05-25 01:37:03 +02:00
carlospolop
b91334e5b3
fix
2025-05-24 23:37:00 +02:00
carlospolop
b7bc20a027
improvement
2025-05-24 23:31:12 +02:00
carlospolop
c288f3a810
fw
2025-05-24 23:05:13 +02:00
carlospolop
f3e29a509f
fix winpeas
2025-05-24 23:02:18 +02:00
carlospolop
c29fc553b5
Merge branch 'master' of github.com:peass-ng/PEASS-ng
2025-05-24 08:30:12 +02:00
carlospolop
1e7a90d29f
cursor rewrite + network checks
2025-05-24 08:29:47 +02:00
Signum21
368f0af794
WinPeas: Differentiate between Allow ACLs and Deny ACLs
...
Works for files, folders, registry keys and named pipes
2025-05-21 03:33:33 +02:00
SirBroccoli
7008652029
Merge pull request #462 from jahway603/jahway603-patch-1
...
Minor URL fix
2025-03-30 19:18:52 +02:00
SirBroccoli
e5239f8c58
Merge pull request #461 from Signum21/master
...
Handle path access denied
2025-03-30 19:18:34 +02:00
Carlos Polop
46193aa0d5
fix
2025-03-20 05:13:54 +01:00
Carlos Polop
62022abc47
impr winpeas
2025-03-20 05:02:34 +01:00
jahway603
d63e737b63
Minor URL fix
2025-03-18 12:33:50 -04:00
Signum21
0b041ad694
Handle path access denied
...
The program crashes when trying to access a path that is not allowed.
An exampe of this can be found on the latest HackTheBox machine (TheFrizz) where the starting user can't access the path C:\Users
2025-03-16 05:43:48 +01:00
Carlos Polop
ce5cb1ad9c
fix
2025-02-24 00:21:09 +01:00
Carlos Polop
30586c064f
Merge branch 'master' of github.com:peass-ng/PEASS-ng
2025-02-23 23:58:45 +01:00
Carlos Polop
b82fc9ac39
improve winpeas azure env detection
2025-02-23 23:58:41 +01:00
SirBroccoli
54818756e4
Update README.md
2025-02-23 23:47:47 +01:00
Carlos Polop
2b64ffc803
a
2025-02-16 16:15:19 +01:00
Carlos Polop
7cd9e6f78b
az tokens
2025-01-25 00:40:15 +01:00
dependabot[bot]
859a44230d
Bump System.Text.RegularExpressions in /winPEAS/winPEASexe/Tests
...
Bumps System.Text.RegularExpressions from 4.3.0 to 4.3.1.
---
updated-dependencies:
- dependency-name: System.Text.RegularExpressions
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-24 18:29:38 +00:00
Carlos Polop
21a5ef9325
add az tokens
2025-01-24 19:27:57 +01:00
Jimmy
96b7bdaf91
Brief description of your changes
2025-01-06 13:55:15 +01:00
SirBroccoli
82088b597c
Merge pull request #449 from Average-Bear/master
...
WinPEAS.ps1 changes only -- Minor fixes, Removed Get-CimInstance Win32_product for ("Known Bad"), Remove PSCustomObject for cmdlet PSObject
2025-01-06 11:08:06 +01:00
darses
a150d4a022
Add Windows LAPS check to winPEAS.bat
2024-11-28 19:37:58 +01:00
Carlos Polop
cdb81d7eb4
up
2024-11-28 11:44:32 +01:00
Jeremy DeWitt
90442f8e0c
Minor Fixes
2024-10-29 13:39:16 -05:00
Carlos Polop
6a98d46987
Merge branch 'master' of github.com:peass-ng/PEASS-ng
2024-10-11 02:44:54 +01:00
Carlos Polop
f55d20a67d
fix google password sync
2024-10-11 02:44:43 +01:00
SirBroccoli
623fdd24d7
Merge pull request #444 from 0x48756773/master
...
Fixed Select-Objet - winPEAS.ps1
2024-10-11 01:54:10 +01:00
Carlos Polop
abd4aa59cd
Google Password Sync
2024-10-11 01:51:45 +01:00
0x48756773
54fcb8a98b
Update winPEAS.ps1
2024-10-09 09:23:46 -05:00
Carlos Polop
eebe7974a9
gcds
2024-10-07 13:35:40 +01:00
