Commit Graph

50 Commits

Author SHA1 Message Date
Michael Moran
5b96594c3c speed up file search and fix long path error 2023-03-28 06:25:05 +11:00
godylockz
3cc49b5b9a Code Cleanup 2022-12-23 00:45:23 -05:00
Carlos Polop
219b1669c3
Update Beaprint.cs 2022-10-06 17:46:45 +02:00
carlospolop
1274f21097 debug regex searches 2022-09-30 19:47:38 +02:00
carlospolop
f86e301a1b try fix long path error 2022-09-30 14:50:56 +02:00
carlospolop
bbc22b3a91 update 2022-07-30 12:06:10 +02:00
carlospolop
585fcc33b2 change url 2022-05-01 17:43:55 +01:00
Carlos Polop
8d232ee083
Update Beaprint.cs 2022-04-08 23:54:49 +01:00
carlospolop
09312c6883 winpeas fix 2022-03-07 22:49:35 +00:00
jask06
05d35fb016
Update Magenta ANSI code
Updating the colon to a semi-colon in order to properly print the item following the code in Magenta. Currently, it prints out the text, but does not put the item in the color.

Reference: https://bixense.com/clicolors/ and also the LMAGENTA ANSI code below MAGENTA.

Thanks!
2021-11-05 17:45:25 -05:00
makikvues
1eb12a5852 - fixed wlan enumeration - if wlanapi.dll is unsupported, try to use netsh
- added support to log to file
- updated check for modifiable services
- updated documentation
2021-09-21 21:02:52 +02:00
Carlos.Martin
757dbc83cc a 2021-08-27 21:17:14 +01:00
makikvues
dbfd0be62e - added ISSUE_TEMPLATE.md
- added null reference checks
2021-08-27 21:19:16 +02:00
Carlos Polop
e67097e123 peass-ng 2021-07-15 23:01:51 +02:00
makikvues
2a1d2cfb52 - implemented YAML checks
- updated sensitive_files.yaml
2021-07-06 13:57:25 +02:00
makikvues
d8cc0f31d3 - added github actions for winpeas
- updated Beaprint - titles
- added test solution
2021-07-06 13:47:50 +02:00
Carlos.Martin
28b3df57ab fix 2021-05-14 09:42:08 +01:00
carlospolop
e49e1e5f6d winpeasv2 fixes 2021-03-05 12:40:35 +00:00
kali
fffcbb18ba improved services permissions checks 2021-03-04 19:40:08 -05:00
Carlos Polop
bcfd7a8bc3
Merge pull request #113 from makikvues/master
Introduced PermissionTypes enum, added AllowUnsafeBlocks for all configurations
2021-03-05 00:18:01 +00:00
makikvues
6bfe947250 - introduced PermissionType - DEFAULT, EADABLE_OR_WRITABLE, WRITEABLE_OR_EQUIVALENT
- added AllowUnsafeBlocks for all configurations
2021-03-04 19:49:29 +01:00
Carlos Polop
30aea9f980
Merge pull request #110 from makikvues/master
bugfixes, enumeration of local/domain users
2021-03-02 21:27:09 +00:00
makikvues
94f9bb72ac - added domain argument (to enable enumeration of domain users)
- only local users enumerated by default
- added permissions check for SAM backups
- fixed GetPermissionsFile - did not process files without an extension
- added Read / ReadData permission to PermInt2Str
- updated WinPEAS.exe README.md
2021-03-02 20:36:08 +01:00
Carlos Polop
25f449de6f
Update Beaprint.cs 2021-02-28 11:06:36 +00:00
makikvues
3cbf6cc43d - added marketing banner 2021-02-15 22:10:47 +01:00
makikvues
1ceb041ee5 - updated PrintMcAffeSitelistFiles
- linpeas & lolbas checks running optionally if specified
2021-02-13 17:02:03 +01:00
makikvues
d6d7b4e0e0 - removed CMD checks
- small cleanup
- updated PrintAppCmd
- updated AutoRuns checks
2021-02-13 11:13:26 +01:00
makikvues
f3c7e92735 - added PrintLOLBAS
- added PrintInternetSettings
- added PrintPowerShellSessionSettings
- added PrintNtlmSettings
- added PrintRDPSettings
2021-02-11 22:36:39 +01:00
makikvues
49a4344730 - added PrintOffice365EndpointsSyncedByOneDrive
- added PrintOfficeMostRecentFiles
- added PrintCurrentTenantInfo
- cleanup
2021-02-10 22:58:18 +01:00
makikvues
df843d3825 - updated PrintWSLDistributions - running linpeas.sh in default WSL distribution
- added PrintLSAInfo
- added PrintLocalGroupPolicy
- added PrintLocalUsers
2021-02-09 22:51:16 +01:00
makikvues
647fe190ef - added Brave browser credentials extraction
- added PowerOnEvents
- added PrintOutlookDownloads
- added PrintAuditPoliciesInfo
- added search keywords for keepass
2021-02-08 22:50:58 +01:00
makikvues
343b8bb96b - refactoring/cleanup
- added .net versions check
- added PrintMappedDrivesWMI
- added PrintMicrosoftUpdatesCOM
- added PrintSystemLastShutdownTime
- added PrintCurrentUserIdleTime
- added PowerShell Core Version check
- updated ListCloudCreds
- updated GetMcAfeeSitelistFiles
- added PrintMachineAndUserCertificateFiles
2021-02-07 23:13:14 +01:00
makikvues
839e4a79ba - rewrote Directory.Get* to Directory.Enumerate* to improve search speed 2021-02-04 21:07:56 +01:00
makikvues
2f4c58d202 - commented out CleanLists 2021-02-03 22:18:37 +01:00
makikvues
fb17429f67 - refactoring / cleanup - moved all native external methods to /Native folder/classes
- added new event checks - Explicit Logon Events, Logon Events, PowerShell Events, Process Creation Events
- added PrintSecurityPackagesCredentials check
- added Windows Defender enumeration
2021-02-03 21:54:20 +01:00
makikvues
cc24db3ff5 - cleanup & updates 2021-02-02 17:48:06 +01:00
makikvues
c2d7f1b5b0 - updates & fixes 2021-01-31 18:48:44 +01:00
makikvues
9a6e5d5831 - fixed namespaces
- added CredentialGuard check
- added Named Pipes enumeration
- added Printers enumeration
- added SysMon enumeration
- added Logon Sessions enumeration
- added SuperPutty config files check
- added Oracle SQL Developer Config files check
- added AMSI providers check
- added SCCM check
- fixed output formatting
2021-01-31 14:13:56 +01:00
makikvues
977e183068 - added saved password extraction for: Opera, Firefox, Chrome 2021-01-28 10:19:27 +01:00
makikvues
27e8867236 - cleanup
- fixed using on IDisposables
2021-01-25 23:52:29 +01:00
makikvues
2a0ab7bf77 - added search for hidden files in c:\users 2021-01-25 21:39:20 +01:00
makikvues
f5155d5eb4 - added PrintOtherUsersInterestingFiles check
- cleanup
2021-01-24 13:19:52 +01:00
makikvues
39c71eb4a3 - updated applocker implementation
- added logging to text file
- updated PermissionsHelper to allow searching only for write or equivalent permissions
- optimized StaticSID2GroupName
- updated printing in PrintCredManag
2021-01-23 16:38:35 +01:00
makikvues
9dd1fdbc95 - scheduled tasks rewrite - cleanup, excluding also Microsoft from Path; skipping failed scheduled tasks
- added total execution time for debugging purposes
- bugfixes
- GetEverLoggedUsers() - skipping users which could not be translated
2021-01-18 22:12:01 +01:00
makikvues
e16234b773 - refactoring & cleanup
- TODO: first version of AppLocker implementation
- CredentialManager implementation
- added check of LsaCompatiblityLevel
- updated GetAutoRunsFolder
- updated PrintTranscriptPS
2021-01-17 23:38:39 +01:00
makikvues
448a1aaf5b - fixed getting data from clipboard
- fixed GetExecutableFromPath
- unified exception logging
- cleanup
2021-01-14 23:50:19 +01:00
makikvues
bf10cd7c0c - implemented quicker search with pre-caching search files/directories 2021-01-13 22:36:53 +01:00
makikvues
c8683a9a48 - added debug to usage 2021-01-10 20:40:01 +01:00
makikvues
ff030224fe - reverted new test search method
- added debugging information - memory, method execution time
2021-01-10 20:37:49 +01:00
makikvues
2f467a3405 - huge refactoring 2021-01-10 14:46:34 +01:00