gitea-mirror/PEASS-ng
1
0
Fork 0
mirror of https://github.com/peass-ng/PEASS-ng.git synced 2026-08-03 01:16:58 -07:00
Code Issues Packages Projects Releases Wiki Activity
1,794 Commits 130 Branches 398 Tags
b7b7aebf1cbf0e6d9a66c76e58fd6907d67d5dee
Commit Graph
384 Commits
Author SHA1 Message Date
HackTricks News Bot b7b7aebf1c Add winpeas privilege escalation checks from: pipetap – A Windows Named Pipe Multi-tool and Proxy for Intercepting and Replayi 2025-12-09 02:07:57 +00:00
HackTricks News Bot 11c0d14561 Add winpeas privilege escalation checks from: HackTheBox Mirage: Chaining NFS Leaks, Dynamic DNS Abuse, NATS Credential Theft, 2025-11-22 18:54:22 +00:00
moscow chillandClaude 336c53a163 Fix ANSI escape codes displaying as literal text in winPEAS.bat 
The script was setting E=0x1B[ as a literal string instead of the actual
ESC character (ASCII 27), causing color codes to display as text like
"0x1B[33m[+]0x1B[97m" instead of rendering as colors.

Changed the SetOnce subroutine to properly capture the ESC character using
the 'prompt $E' technique before building the ANSI escape sequence prefix.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-10-29 20:16:34 +01:00
moscow chillandClaude 29d8132d93 Fix winPEAS.bat compatibility with Windows 11 and modern Windows 10 
WMIC has been deprecated since Windows 10 20H1 and removed in Windows 11.
The script was exiting early when WMIC commands failed instead of continuing.

Changes:
- Add proper WMIC existence checks using 'where wmic' before execution
- Implement PowerShell fallbacks for all WMIC commands
- Fix hotfix enumeration (Get-HotFix)
- Fix antivirus detection (Get-CimInstance)
- Fix mounted disk enumeration (Get-PSDrive)
- Fix running process checks (Get-Process)
- Fix service binary permission checks (Get-CimInstance Win32_Service)
- Add error suppression (2>nul) to conditional WMIC exploit checks

The script now properly detects WMIC availability and falls back to
PowerShell equivalents, ensuring full functionality on modern Windows
systems while maintaining backward compatibility with older systems.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-10-27 16:10:42 +01:00
CravateRougeandGitHub b8b4a0fc14 Fix InterfaceFlags syntax 2025-10-07 11:14:45 +08:00
CravateRouge 7042a182df Add ADCS ESC DC registry checks 2025-10-06 17:18:44 +02:00
jtothefandGitHub 7c9f431649 Update README.md 
Fix typo
 2025-09-23 12:49:05 -05:00
SirBroccoliandGitHub 215c5d074e Merge pull request #456 from peass-ng/dependabot/nuget/winPEAS/winPEASexe/Tests/System.Text.RegularExpressions-4.3.1 
Bump System.Text.RegularExpressions from 4.3.0 to 4.3.1 in /winPEAS/winPEASexe/Tests
 2025-09-03 13:36:40 +02:00
SirBroccoliandGitHub 46264bf239 Merge pull request #497 from peass-ng/update_PEASS-winpeas-HTB_Sendai__From_password_spray_to_g_20250828_184040 
[WINPEAS] Add privilege escalation check: HTB Sendai From password spray to gMSA d...
 2025-09-03 13:31:10 +02:00
HackTricks News Bot 54d861ab04 Add winpeas privilege escalation checks from: HTB Sendai: From password spray to gMSA dump, then ADCS ESC4 or SQL+Silver Ticke 2025-08-28 18:51:59 +00:00
HackTricks News Bot bbb932d6d3 feat(winpeas): add ActiveDirectoryInfo check (gMSA readable passwords, AD CS template rights) and include in project 2025-08-28 18:50:51 +00:00
HackTricks News Bot 626ea2d298 docs(usage): add activedirectoryinfo option to usage output 2025-08-28 18:50:22 +00:00
HackTricks News Bot c314cfd23d Add winpeas privilege escalation checks from: HTB: TheFrizz (High-level, redacted for safety) 2025-08-27 19:14:43 +00:00
securitytimeandGitHub 933e12d7f1 Update Beaprint.cs 
A space character is missing here:
"... educational purposes only.Any misuse of this software  ..."
 2025-06-28 09:12:40 +02:00
Signum21 d335b9254f Fixed multiple bugs in Vulnerable Leaked Handlers 2025-06-15 20:59:20 +02:00
Signum21 f62d9fc550 Fix System.Security.Principal.IdentityNotMappedException in Vulnerable Leaked Handlers 2025-05-31 04:56:14 +02:00
carlospolop aab8241ede f 2025-05-25 02:21:39 +02:00
carlospolop 65b98d11ac only print errors when relevant 2025-05-25 02:10:07 +02:00
carlospolop 1e72dbeb76 impr winpeas networking checks 2025-05-25 01:46:30 +02:00
carlospolop c9282b4bdb fix winpeas? 2025-05-25 01:37:03 +02:00
carlospolop b91334e5b3 fix 2025-05-24 23:37:00 +02:00
carlospolop b7bc20a027 improvement 2025-05-24 23:31:12 +02:00
carlospolop c288f3a810 fw 2025-05-24 23:05:13 +02:00
carlospolop f3e29a509f fix winpeas 2025-05-24 23:02:18 +02:00
carlospolop c29fc553b5 Merge branch 'master' of github.com:peass-ng/PEASS-ng 2025-05-24 08:30:12 +02:00
carlospolop 1e7a90d29f cursor rewrite + network checks 2025-05-24 08:29:47 +02:00
Signum21andGitHub 368f0af794 WinPeas: Differentiate between Allow ACLs and Deny ACLs 
Works for files, folders, registry keys and named pipes
 2025-05-21 03:33:33 +02:00
SirBroccoliandGitHub 7008652029 Merge pull request #462 from jahway603/jahway603-patch-1 
Minor URL fix
 2025-03-30 19:18:52 +02:00
SirBroccoliandGitHub e5239f8c58 Merge pull request #461 from Signum21/master 
Handle path access denied
 2025-03-30 19:18:34 +02:00
Carlos Polop 46193aa0d5 fix 2025-03-20 05:13:54 +01:00
Carlos Polop 62022abc47 impr winpeas 2025-03-20 05:02:34 +01:00
jahway603 d63e737b63 Minor URL fix 2025-03-18 12:33:50 -04:00
Signum21andGitHub 0b041ad694 Handle path access denied 
The program crashes when trying to access a path that is not allowed.
An exampe of this can be found on the latest HackTheBox machine (TheFrizz) where the starting user can't access the path C:\Users
 2025-03-16 05:43:48 +01:00
Carlos Polop ce5cb1ad9c fix 2025-02-24 00:21:09 +01:00
Carlos Polop 30586c064f Merge branch 'master' of github.com:peass-ng/PEASS-ng 2025-02-23 23:58:45 +01:00
Carlos Polop b82fc9ac39 improve winpeas azure env detection 2025-02-23 23:58:41 +01:00
SirBroccoliandGitHub 54818756e4 Update README.md 2025-02-23 23:47:47 +01:00
Carlos Polop 2b64ffc803 a 2025-02-16 16:15:19 +01:00
Carlos Polop 7cd9e6f78b az tokens 2025-01-25 00:40:15 +01:00
dependabot[bot]andGitHub 859a44230d Bump System.Text.RegularExpressions in /winPEAS/winPEASexe/Tests 
Bumps System.Text.RegularExpressions from 4.3.0 to 4.3.1.

---
updated-dependencies:
- dependency-name: System.Text.RegularExpressions
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-24 18:29:38 +00:00
Carlos Polop 21a5ef9325 add az tokens 2025-01-24 19:27:57 +01:00
Jimmy 96b7bdaf91 Brief description of your changes 2025-01-06 13:55:15 +01:00
SirBroccoliandGitHub 82088b597c Merge pull request #449 from Average-Bear/master 
WinPEAS.ps1 changes only -- Minor fixes, Removed Get-CimInstance Win32_product for ("Known Bad"), Remove PSCustomObject for cmdlet PSObject
 2025-01-06 11:08:06 +01:00
darses a150d4a022 Add Windows LAPS check to winPEAS.bat 2024-11-28 19:37:58 +01:00
Carlos Polop cdb81d7eb4 up 2024-11-28 11:44:32 +01:00
Jeremy DeWittandGitHub 90442f8e0c Minor Fixes 2024-10-29 13:39:16 -05:00
Carlos Polop 6a98d46987 Merge branch 'master' of github.com:peass-ng/PEASS-ng 2024-10-11 02:44:54 +01:00
Carlos Polop f55d20a67d fix google password sync 2024-10-11 02:44:43 +01:00
SirBroccoliandGitHub 623fdd24d7 Merge pull request #444 from 0x48756773/master 
Fixed Select-Objet - winPEAS.ps1
 2024-10-11 01:54:10 +01:00
Carlos Polop abd4aa59cd Google Password Sync 2024-10-11 01:51:45 +01:00