Commit Graph
504 Commits
Author SHA1 Message Date
Carlos PolopandGitHub 4ebf5ee402 Merge pull request #104 from makikvues/master
WinPEAS v2 implementation - huge refactoring, cleanup, bugfixes, improved search speed, 10 updated & 40+ new checks
2021-02-16 12:12:34 +00:00
Carlos PolopandGitHub 0119992d1e Merge branch 'master' into master 2021-02-16 12:12:21 +00:00
makikvues 3cbf6cc43d - added marketing banner 2021-02-15 22:10:47 +01:00
Carlos PolopandGitHub ce43bf57fa Update README.md 2021-02-15 09:13:30 +00:00
makikvues dfb0bcdc34 - updated README.md 2021-02-14 15:02:30 +01:00
makikvues 74d4b2dfe9 - updated README.md 2021-02-14 10:39:58 +01:00
makikvues 6a99882f85 - suppressing chrome decrypt credentials error 2021-02-13 17:33:15 +01:00
makikvues 1ceb041ee5 - updated PrintMcAffeSitelistFiles
- linpeas & lolbas checks running optionally if specified
2021-02-13 17:02:03 +01:00
makikvues d6d7b4e0e0 - removed CMD checks
- small cleanup
- updated PrintAppCmd
- updated AutoRuns checks
2021-02-13 11:13:26 +01:00
makikvues f3c7e92735 - added PrintLOLBAS
- added PrintInternetSettings
- added PrintPowerShellSessionSettings
- added PrintNtlmSettings
- added PrintRDPSettings
2021-02-11 22:36:39 +01:00
makikvues 49a4344730 - added PrintOffice365EndpointsSyncedByOneDrive
- added PrintOfficeMostRecentFiles
- added PrintCurrentTenantInfo
- cleanup
2021-02-10 22:58:18 +01:00
makikvues df843d3825 - updated PrintWSLDistributions - running linpeas.sh in default WSL distribution
- added PrintLSAInfo
- added PrintLocalGroupPolicy
- added PrintLocalUsers
2021-02-09 22:51:16 +01:00
Kali 6133e624ec linpeasv3.0.4 2021-02-09 05:25:33 -05:00
Kali f22283bd20 linpeasv3.0.3 2021-02-09 04:38:00 -05:00
Kali f83cf6706d Merge branch 'master' of https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite 2021-02-09 04:32:06 -05:00
Kali ffd2a659ed linpeasv3.0.3 2021-02-09 04:31:23 -05:00
makikvues 647fe190ef - added Brave browser credentials extraction
- added PowerOnEvents
- added PrintOutlookDownloads
- added PrintAuditPoliciesInfo
- added search keywords for keepass
2021-02-08 22:50:58 +01:00
makikvues 343b8bb96b - refactoring/cleanup
- added .net versions check
- added PrintMappedDrivesWMI
- added PrintMicrosoftUpdatesCOM
- added PrintSystemLastShutdownTime
- added PrintCurrentUserIdleTime
- added PowerShell Core Version check
- updated ListCloudCreds
- updated GetMcAfeeSitelistFiles
- added PrintMachineAndUserCertificateFiles
2021-02-07 23:13:14 +01:00
makikvues 839e4a79ba - rewrote Directory.Get* to Directory.Enumerate* to improve search speed 2021-02-04 21:07:56 +01:00
makikvues 2f4c58d202 - commented out CleanLists 2021-02-03 22:18:37 +01:00
makikvues fb17429f67 - refactoring / cleanup - moved all native external methods to /Native folder/classes
- added new event checks - Explicit Logon Events, Logon Events, PowerShell Events, Process Creation Events
- added PrintSecurityPackagesCredentials check
- added Windows Defender enumeration
2021-02-03 21:54:20 +01:00
makikvues cc24db3ff5 - cleanup & updates 2021-02-02 17:48:06 +01:00
makikvues 80288c568a - removed throwing exceptions in Chrome, Opera 2021-02-02 17:19:31 +01:00
makikvues 86bf58f45c - fixed compilation symbols for all releases / configurations
- added Slack check
2021-02-02 15:58:22 +01:00
makikvues c2d7f1b5b0 - updates & fixes 2021-01-31 18:48:44 +01:00
makikvues 7bbe71d290 - uncommented CreateDynamicLists 2021-01-31 18:17:30 +01:00
makikvues 8a8393dcc8 - updated listening ports enumeration check - added process pid + name 2021-01-31 18:12:22 +01:00
makikvues 9a6e5d5831 - fixed namespaces
- added CredentialGuard check
- added Named Pipes enumeration
- added Printers enumeration
- added SysMon enumeration
- added Logon Sessions enumeration
- added SuperPutty config files check
- added Oracle SQL Developer Config files check
- added AMSI providers check
- added SCCM check
- fixed output formatting
2021-01-31 14:13:56 +01:00
makikvues 977e183068 - added saved password extraction for: Opera, Firefox, Chrome 2021-01-28 10:19:27 +01:00
Carlos PolopandGitHub a371e9dddd Merge pull request #98 from Jab2870/bugfix
Fix: False positive for writeable network-scripts directory
2021-01-27 12:38:39 +01:00
Jonathan Hodgson 37a2030faf Fix: False positive for writeable network-scripts directory
Symbolic links almost always have 777 permissions although this doesn't
mean you can change them.

This commit prevents the tool from flagging symbolic links with write
access in the /etc/sysconfig/network-scripts folder
2021-01-27 11:27:44 +00:00
makikvues 27e8867236 - cleanup
- fixed using on IDisposables
2021-01-25 23:52:29 +01:00
makikvues 24754e374f - fixed missing comma 2021-01-25 22:46:53 +01:00
makikvues 23d3e1cd22 - added check PrintExecutablesInNonDefaultFoldersWithWritePermissions() 2021-01-25 22:46:14 +01:00
makikvues 2a0ab7bf77 - added search for hidden files in c:\users 2021-01-25 21:39:20 +01:00
makikvues f5155d5eb4 - added PrintOtherUsersInterestingFiles check
- cleanup
2021-01-24 13:19:52 +01:00
makikvues 39c71eb4a3 - updated applocker implementation
- added logging to text file
- updated PermissionsHelper to allow searching only for write or equivalent permissions
- optimized StaticSID2GroupName
- updated printing in PrintCredManag
2021-01-23 16:38:35 +01:00
makikvues 4395b871d8 - updated PrintLinuxShells() - WSL checks 2021-01-22 11:41:19 +01:00
Carlos PolopandGitHub 55f10da6c3 Update linpeas.sh 2021-01-22 00:42:15 +00:00
Carlos PolopandGitHub 5c96254607 Merge pull request #97 from axano/patch-1
Added log file capability
2021-01-22 01:41:05 +01:00
Emmanouil PerselisandGitHub d587c05833 Update Program.cs
I have added the option to write the output to a file when the parameter "log" is inserted. This is because I was not able to see the output when I was loading the exe with reflective PE injection in Powershell.
2021-01-21 17:43:24 +01:00
makikvues e76e097627 - refactoring & cleanup
- updated Autorun checks
2021-01-19 23:56:26 +01:00
makikvues a27ad66892 - Program and Main made public 2021-01-18 23:37:55 +01:00
makikvues 9dd1fdbc95 - scheduled tasks rewrite - cleanup, excluding also Microsoft from Path; skipping failed scheduled tasks
- added total execution time for debugging purposes
- bugfixes
- GetEverLoggedUsers() - skipping users which could not be translated
2021-01-18 22:12:01 +01:00
makikvues e16234b773 - refactoring & cleanup
- TODO: first version of AppLocker implementation
- CredentialManager implementation
- added check of LsaCompatiblityLevel
- updated GetAutoRunsFolder
- updated PrintTranscriptPS
2021-01-17 23:38:39 +01:00
makikvues 448a1aaf5b - fixed getting data from clipboard
- fixed GetExecutableFromPath
- unified exception logging
- cleanup
2021-01-14 23:50:19 +01:00
Carlos PolopandGitHub b8fd7a349a Merge pull request #96 from DidierA/sed_option
check if sed accepts -r instead of -E
2021-01-14 12:43:23 +01:00
DidierA dd61ed8591 check if sed accepts -r instead of -E 2021-01-14 12:09:17 +01:00
Carlos PolopandGitHub e41c819986 Merge pull request #95 from DidierA/fix-infinite-loop
fix for infinite loop when sed does not support -E
2021-01-14 10:26:03 +01:00
DidierA 12d68d7a80 fix for infinite loop when sed does not support -E 2021-01-14 09:59:30 +01:00