Commit Graph
100 Commits
Author SHA1 Message Date
makikvues 78d187db52 - fixed logo
- updated tests, long-running checks are removed
- create search lists only if necessary
2023-08-03 19:21:22 +02:00
makikvues 869145388d - added progress bar while reading leaked handles 2023-07-30 17:38:57 +02:00
makikvues bcd52764ba - added alphaFS as 3rd party library
- PrintVulnLeakedHandlers wrapped in try/catch
- removed commented out code in SearchHelper.cs
- added check for empty config in YamlConfigHelper
2023-07-30 11:01:20 +02:00
makikvues 1eb12a5852 - fixed wlan enumeration - if wlanapi.dll is unsupported, try to use netsh
- added support to log to file
- updated check for modifiable services
- updated documentation
2021-09-21 21:02:52 +02:00
makikvues 557f96d8be Merge branch 'winpeas_dev' of https://github.com/carlospolop/PEASS-ng into winpeas_dev 2021-08-27 23:35:59 +02:00
makikvues 1186060f36 - exception handling for LsaRegisterLogonProcessHelper 2021-08-27 23:35:54 +02:00
makikvues 075d57b1a6 Merge branch 'master' into winpeas_dev 2021-08-27 23:14:31 +02:00
makikvues dbfd0be62e - added ISSUE_TEMPLATE.md
- added null reference checks
2021-08-27 21:19:16 +02:00
makikvues 856661bdb0 Merge branch 'master' of https://github.com/carlospolop/PEASS-ng 2021-08-27 17:53:08 +02:00
makikvues 3b0a092379 - added issue template 2021-08-27 17:53:03 +02:00
makikvues 949996a4a1 - winpeas pipelines updates 2021-07-15 09:26:34 +02:00
makikvues 24884a1d7e - ci pipeline updates - winpeas 2021-07-15 09:23:46 +02:00
makikvues 94212e403e - update CI winpeas dev test 2021-07-15 09:22:50 +02:00
makikvues 44f6d22489 - whitespace in README.md 2021-07-15 09:13:25 +02:00
makikvues 9896529574 - CI winpeas dev test updates 2021-07-15 09:13:00 +02:00
makikvues 83ea472cd5 - whitespace 2021-07-15 08:22:05 +02:00
makikvues 5ba2a26604 - v1.6.1 multi 2021-07-15 08:21:44 +02:00
makikvues d2e9942d1e - whitespace 2021-07-15 08:17:13 +02:00
makikvues cd26231a9b - updates of create-pull-request 2021-07-15 08:16:51 +02:00
makikvues db7a850381 - updates to trigger CI 2021-07-15 08:11:20 +02:00
makikvues 57ee4ba9cd - testing create-pull-request@v1.3.1-multi 2021-07-15 08:10:47 +02:00
makikvues 100064a8c9 - whitespace 2021-07-14 22:59:39 +02:00
makikvues ce48100337 - updated winpeas dev ci 2021-07-14 22:58:51 +02:00
makikvues eadf7cedd1 - updated winPEASexe/README.md - added whitespace to test github actions 2021-07-14 22:16:32 +02:00
makikvues 6fbf309a80 - updated CI-winpeas_dev_test.yml 2021-07-14 22:14:48 +02:00
makikvues 59a64941a1 - whitespace change to test winpeas CI pipeline 2021-07-13 22:14:18 +02:00
makikvues b150357494 - testing slashes in paths CI winpeas pipeline 2021-07-13 22:13:04 +02:00
makikvues a19e7740ea - updates 2021-07-13 20:40:54 +02:00
makikvues 8c43dac07d Merge branch 'master' of https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite 2021-07-13 20:37:10 +02:00
makikvues f92e21b212 - updated winpeas actions, git pull before push 2021-07-13 20:37:02 +02:00
makikvues d9b3de49a6 Merge branch 'master' of https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite 2021-07-07 14:54:46 +02:00
makikvues eeef43b7c4 enabled tests 2021-07-07 14:54:11 +02:00
makikvues 39d65fd9d9 - fixed action 2021-07-07 14:46:17 +02:00
makikvues 3bb8d41055 - updates 2021-07-07 14:38:28 +02:00
makikvues 928b6131d1 - build action update 2021-07-07 14:34:56 +02:00
makikvues 2ea628638a - updated dotfuscator path 2021-07-07 14:31:21 +02:00
makikvues a3aa67e132 - build action update 2021-07-07 14:25:17 +02:00
makikvues da74bc6f12 - updates 2021-07-07 14:17:31 +02:00
makikvues ba2a7069db - github action updates 2021-07-07 14:16:03 +02:00
makikvues 5cf0cb8843 - github action updates 2021-07-07 14:12:29 +02:00
makikvues 6ded600ec3 Merge branch 'master' of https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite 2021-07-07 14:05:31 +02:00
makikvues d46a45c509 - added obfuscator 2021-07-07 14:04:34 +02:00
makikvues 253f62ecbc - updated github action 2021-07-07 12:24:26 +02:00
makikvues d9c5406244 - updates 2021-07-07 12:13:09 +02:00
makikvues faefb80ec4 - updated winpeas tests
- updated CI-winpeas_build_test.yml
2021-07-07 10:46:51 +02:00
makikvues 9e9a3f55a3 Merge branch 'master' of https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite 2021-07-06 17:16:58 +02:00
makikvues 7b5f309004 - updated CI-winpeas_PR.yml 2021-07-06 17:16:51 +02:00
makikvues 4d36f3b16a Merge branch 'winpeas_dev' 2021-07-06 17:09:26 +02:00
makikvuesandGitHub 5a552913d2 Update SmokeTests.cs
- updated tests
2021-07-06 17:07:44 +02:00
makikvues 4a0bc39db1 Merge branch 'master' into winpeas_dev 2021-07-06 17:05:22 +02:00
makikvues f4bb5dcb9d - tests update 2021-07-06 16:56:28 +02:00
makikvues 1af100d9c4 - updates tests project
- updated github action
2021-07-06 15:19:49 +02:00
makikvues f1316db5f3 - replaced packages.config with PackageReference 2021-07-06 14:34:12 +02:00
makikvues da4862f85a - removed .net installation from github action 2021-07-06 14:24:18 +02:00
makikvues 6acb8a29f8 - added source-url 2021-07-06 14:18:31 +02:00
makikvues d69908e427 - CI-winpeas_test.yml updates 2021-07-06 14:08:03 +02:00
makikvues e74ded2ba6 - whitespace to trigger github action 2021-07-06 13:59:57 +02:00
makikvues 2a1d2cfb52 - implemented YAML checks
- updated sensitive_files.yaml
2021-07-06 13:57:25 +02:00
makikvues d8cc0f31d3 - added github actions for winpeas
- updated Beaprint - titles
- added test solution
2021-07-06 13:47:50 +02:00
makikvues 4cb1a48975 - sensitive_files.yaml updates - removed duplicates, updated windows files key
- added registry search for CurrentPass
2021-06-22 19:39:53 +02:00
makikvues 6bfe947250 - introduced PermissionType - DEFAULT, EADABLE_OR_WRITABLE, WRITEABLE_OR_EQUIVALENT
- added AllowUnsafeBlocks for all configurations
2021-03-04 19:49:29 +01:00
makikvues 94f9bb72ac - added domain argument (to enable enumeration of domain users)
- only local users enumerated by default
- added permissions check for SAM backups
- fixed GetPermissionsFile - did not process files without an extension
- added Read / ReadData permission to PermInt2Str
- updated WinPEAS.exe README.md
2021-03-02 20:36:08 +01:00
makikvues d41684d66c - updated LanmanCompatibilityLevel 2021-02-28 12:26:52 +01:00
makikvues 5727ab799e Merge branch 'master' of https://github.com/makikvues/privilege-escalation-awesome-scripts-suite into refactoring_cleanup 2021-02-27 20:11:09 +01:00
makikvues 5877659e57 - updated EventsInfo.cs - removed throw 2021-02-27 20:10:50 +01:00
makikvues 3cbf6cc43d - added marketing banner 2021-02-15 22:10:47 +01:00
makikvues dfb0bcdc34 - updated README.md 2021-02-14 15:02:30 +01:00
makikvues 74d4b2dfe9 - updated README.md 2021-02-14 10:39:58 +01:00
makikvues 6a99882f85 - suppressing chrome decrypt credentials error 2021-02-13 17:33:15 +01:00
makikvues 1ceb041ee5 - updated PrintMcAffeSitelistFiles
- linpeas & lolbas checks running optionally if specified
2021-02-13 17:02:03 +01:00
makikvues d6d7b4e0e0 - removed CMD checks
- small cleanup
- updated PrintAppCmd
- updated AutoRuns checks
2021-02-13 11:13:26 +01:00
makikvues f3c7e92735 - added PrintLOLBAS
- added PrintInternetSettings
- added PrintPowerShellSessionSettings
- added PrintNtlmSettings
- added PrintRDPSettings
2021-02-11 22:36:39 +01:00
makikvues 49a4344730 - added PrintOffice365EndpointsSyncedByOneDrive
- added PrintOfficeMostRecentFiles
- added PrintCurrentTenantInfo
- cleanup
2021-02-10 22:58:18 +01:00
makikvues df843d3825 - updated PrintWSLDistributions - running linpeas.sh in default WSL distribution
- added PrintLSAInfo
- added PrintLocalGroupPolicy
- added PrintLocalUsers
2021-02-09 22:51:16 +01:00
makikvues 647fe190ef - added Brave browser credentials extraction
- added PowerOnEvents
- added PrintOutlookDownloads
- added PrintAuditPoliciesInfo
- added search keywords for keepass
2021-02-08 22:50:58 +01:00
makikvues 343b8bb96b - refactoring/cleanup
- added .net versions check
- added PrintMappedDrivesWMI
- added PrintMicrosoftUpdatesCOM
- added PrintSystemLastShutdownTime
- added PrintCurrentUserIdleTime
- added PowerShell Core Version check
- updated ListCloudCreds
- updated GetMcAfeeSitelistFiles
- added PrintMachineAndUserCertificateFiles
2021-02-07 23:13:14 +01:00
makikvues 839e4a79ba - rewrote Directory.Get* to Directory.Enumerate* to improve search speed 2021-02-04 21:07:56 +01:00
makikvues 2f4c58d202 - commented out CleanLists 2021-02-03 22:18:37 +01:00
makikvues fb17429f67 - refactoring / cleanup - moved all native external methods to /Native folder/classes
- added new event checks - Explicit Logon Events, Logon Events, PowerShell Events, Process Creation Events
- added PrintSecurityPackagesCredentials check
- added Windows Defender enumeration
2021-02-03 21:54:20 +01:00
makikvues cc24db3ff5 - cleanup & updates 2021-02-02 17:48:06 +01:00
makikvues 80288c568a - removed throwing exceptions in Chrome, Opera 2021-02-02 17:19:31 +01:00
makikvues 86bf58f45c - fixed compilation symbols for all releases / configurations
- added Slack check
2021-02-02 15:58:22 +01:00
makikvues c2d7f1b5b0 - updates & fixes 2021-01-31 18:48:44 +01:00
makikvues 7bbe71d290 - uncommented CreateDynamicLists 2021-01-31 18:17:30 +01:00
makikvues 8a8393dcc8 - updated listening ports enumeration check - added process pid + name 2021-01-31 18:12:22 +01:00
makikvues 9a6e5d5831 - fixed namespaces
- added CredentialGuard check
- added Named Pipes enumeration
- added Printers enumeration
- added SysMon enumeration
- added Logon Sessions enumeration
- added SuperPutty config files check
- added Oracle SQL Developer Config files check
- added AMSI providers check
- added SCCM check
- fixed output formatting
2021-01-31 14:13:56 +01:00
makikvues 977e183068 - added saved password extraction for: Opera, Firefox, Chrome 2021-01-28 10:19:27 +01:00
makikvues 27e8867236 - cleanup
- fixed using on IDisposables
2021-01-25 23:52:29 +01:00
makikvues 24754e374f - fixed missing comma 2021-01-25 22:46:53 +01:00
makikvues 23d3e1cd22 - added check PrintExecutablesInNonDefaultFoldersWithWritePermissions() 2021-01-25 22:46:14 +01:00
makikvues 2a0ab7bf77 - added search for hidden files in c:\users 2021-01-25 21:39:20 +01:00
makikvues f5155d5eb4 - added PrintOtherUsersInterestingFiles check
- cleanup
2021-01-24 13:19:52 +01:00
makikvues 39c71eb4a3 - updated applocker implementation
- added logging to text file
- updated PermissionsHelper to allow searching only for write or equivalent permissions
- optimized StaticSID2GroupName
- updated printing in PrintCredManag
2021-01-23 16:38:35 +01:00
makikvues 4395b871d8 - updated PrintLinuxShells() - WSL checks 2021-01-22 11:41:19 +01:00
makikvues e76e097627 - refactoring & cleanup
- updated Autorun checks
2021-01-19 23:56:26 +01:00
makikvues a27ad66892 - Program and Main made public 2021-01-18 23:37:55 +01:00
makikvues 9dd1fdbc95 - scheduled tasks rewrite - cleanup, excluding also Microsoft from Path; skipping failed scheduled tasks
- added total execution time for debugging purposes
- bugfixes
- GetEverLoggedUsers() - skipping users which could not be translated
2021-01-18 22:12:01 +01:00
makikvues e16234b773 - refactoring & cleanup
- TODO: first version of AppLocker implementation
- CredentialManager implementation
- added check of LsaCompatiblityLevel
- updated GetAutoRunsFolder
- updated PrintTranscriptPS
2021-01-17 23:38:39 +01:00
makikvues 448a1aaf5b - fixed getting data from clipboard
- fixed GetExecutableFromPath
- unified exception logging
- cleanup
2021-01-14 23:50:19 +01:00
makikvues bf10cd7c0c - implemented quicker search with pre-caching search files/directories 2021-01-13 22:36:53 +01:00