Commit Graph

197 Commits

Author SHA1 Message Date
zoork11
17883fa0de fixed a bug in watson that marked a vulnerable version as not vulnerable and vice versa, added smbghost to watson 2021-06-07 04:06:47 -04:00
TuxTheXplorer
cc00bf89ab
Fixed typo of "Progam" in winPEAS.bat
There is typo on line 454 of "C:\Progam.exe" where it should be "C:\Program.exe"
2021-05-28 11:55:20 +02:00
Carlos.Martin
28b3df57ab fix 2021-05-14 09:42:08 +01:00
zoork11
bad532a204 Adding gitattributes file to ensure windows style line endings on winPEAS.bat 2021-05-07 10:17:44 -04:00
Carlos Polop
80bd473168 linpeasv3.1.6 2021-05-04 23:28:28 +02:00
Jonas A. Wendorf
bb4622a067
Fix path to UseWUServer 2021-03-19 15:01:36 +00:00
carlospolop
e49e1e5f6d winpeasv2 fixes 2021-03-05 12:40:35 +00:00
carlospolop
0d890a4140 quick fix 2021-03-05 01:16:44 +00:00
kali
fffcbb18ba improved services permissions checks 2021-03-04 19:40:08 -05:00
Carlos Polop
bcfd7a8bc3
Merge pull request #113 from makikvues/master
Introduced PermissionTypes enum, added AllowUnsafeBlocks for all configurations
2021-03-05 00:18:01 +00:00
makikvues
6bfe947250 - introduced PermissionType - DEFAULT, EADABLE_OR_WRITABLE, WRITEABLE_OR_EQUIVALENT
- added AllowUnsafeBlocks for all configurations
2021-03-04 19:49:29 +01:00
Carlos Polop
aa84eca5b7
Update README.md 2021-03-03 18:37:56 +00:00
Carlos Polop
30aea9f980
Merge pull request #110 from makikvues/master
bugfixes, enumeration of local/domain users
2021-03-02 21:27:09 +00:00
makikvues
94f9bb72ac - added domain argument (to enable enumeration of domain users)
- only local users enumerated by default
- added permissions check for SAM backups
- fixed GetPermissionsFile - did not process files without an extension
- added Read / ReadData permission to PermInt2Str
- updated WinPEAS.exe README.md
2021-03-02 20:36:08 +01:00
Carlos Polop
5b1be925c7
Update SystemInfo.cs 2021-02-28 11:27:04 +00:00
makikvues
d41684d66c - updated LanmanCompatibilityLevel 2021-02-28 12:26:52 +01:00
Carlos Polop
25f449de6f
Update Beaprint.cs 2021-02-28 11:06:36 +00:00
Carlos Polop
46852732d5
Update README.md 2021-02-28 11:05:44 +00:00
Carlos Polop
7d84d1e706
Update README.md 2021-02-28 10:40:02 +00:00
makikvues
5727ab799e Merge branch 'master' of https://github.com/makikvues/privilege-escalation-awesome-scripts-suite into refactoring_cleanup 2021-02-27 20:11:09 +01:00
makikvues
5877659e57 - updated EventsInfo.cs - removed throw 2021-02-27 20:10:50 +01:00
Carlos Polop
92f51e6553
Update EventsInfo.cs 2021-02-27 19:09:17 +00:00
Kali
9f5ba58f43 peass shop 2021-02-18 08:55:06 -05:00
Carlos Polop
6a995cb16b
Update README.md 2021-02-16 16:20:49 +00:00
kali
edfea93baf fix link 2021-02-16 10:15:04 -05:00
kali
f2b66bc711 winPEASv2 2021-02-16 10:13:02 -05:00
kali
1f3d067ab2 change name 2021-02-16 09:49:37 -05:00
kali
17a3ad0f0a change name 2021-02-16 09:49:14 -05:00
kali
3b30035b9e binaries 2021-02-16 09:46:17 -05:00
Carlos Polop
0119992d1e
Merge branch 'master' into master 2021-02-16 12:12:21 +00:00
makikvues
3cbf6cc43d - added marketing banner 2021-02-15 22:10:47 +01:00
makikvues
dfb0bcdc34 - updated README.md 2021-02-14 15:02:30 +01:00
makikvues
74d4b2dfe9 - updated README.md 2021-02-14 10:39:58 +01:00
makikvues
6a99882f85 - suppressing chrome decrypt credentials error 2021-02-13 17:33:15 +01:00
makikvues
1ceb041ee5 - updated PrintMcAffeSitelistFiles
- linpeas & lolbas checks running optionally if specified
2021-02-13 17:02:03 +01:00
makikvues
d6d7b4e0e0 - removed CMD checks
- small cleanup
- updated PrintAppCmd
- updated AutoRuns checks
2021-02-13 11:13:26 +01:00
makikvues
f3c7e92735 - added PrintLOLBAS
- added PrintInternetSettings
- added PrintPowerShellSessionSettings
- added PrintNtlmSettings
- added PrintRDPSettings
2021-02-11 22:36:39 +01:00
makikvues
49a4344730 - added PrintOffice365EndpointsSyncedByOneDrive
- added PrintOfficeMostRecentFiles
- added PrintCurrentTenantInfo
- cleanup
2021-02-10 22:58:18 +01:00
makikvues
df843d3825 - updated PrintWSLDistributions - running linpeas.sh in default WSL distribution
- added PrintLSAInfo
- added PrintLocalGroupPolicy
- added PrintLocalUsers
2021-02-09 22:51:16 +01:00
makikvues
647fe190ef - added Brave browser credentials extraction
- added PowerOnEvents
- added PrintOutlookDownloads
- added PrintAuditPoliciesInfo
- added search keywords for keepass
2021-02-08 22:50:58 +01:00
makikvues
343b8bb96b - refactoring/cleanup
- added .net versions check
- added PrintMappedDrivesWMI
- added PrintMicrosoftUpdatesCOM
- added PrintSystemLastShutdownTime
- added PrintCurrentUserIdleTime
- added PowerShell Core Version check
- updated ListCloudCreds
- updated GetMcAfeeSitelistFiles
- added PrintMachineAndUserCertificateFiles
2021-02-07 23:13:14 +01:00
makikvues
839e4a79ba - rewrote Directory.Get* to Directory.Enumerate* to improve search speed 2021-02-04 21:07:56 +01:00
makikvues
2f4c58d202 - commented out CleanLists 2021-02-03 22:18:37 +01:00
makikvues
fb17429f67 - refactoring / cleanup - moved all native external methods to /Native folder/classes
- added new event checks - Explicit Logon Events, Logon Events, PowerShell Events, Process Creation Events
- added PrintSecurityPackagesCredentials check
- added Windows Defender enumeration
2021-02-03 21:54:20 +01:00
makikvues
cc24db3ff5 - cleanup & updates 2021-02-02 17:48:06 +01:00
makikvues
80288c568a - removed throwing exceptions in Chrome, Opera 2021-02-02 17:19:31 +01:00
makikvues
86bf58f45c - fixed compilation symbols for all releases / configurations
- added Slack check
2021-02-02 15:58:22 +01:00
makikvues
c2d7f1b5b0 - updates & fixes 2021-01-31 18:48:44 +01:00
makikvues
7bbe71d290 - uncommented CreateDynamicLists 2021-01-31 18:17:30 +01:00
makikvues
8a8393dcc8 - updated listening ports enumeration check - added process pid + name 2021-01-31 18:12:22 +01:00
makikvues
9a6e5d5831 - fixed namespaces
- added CredentialGuard check
- added Named Pipes enumeration
- added Printers enumeration
- added SysMon enumeration
- added Logon Sessions enumeration
- added SuperPutty config files check
- added Oracle SQL Developer Config files check
- added AMSI providers check
- added SCCM check
- fixed output formatting
2021-01-31 14:13:56 +01:00
makikvues
977e183068 - added saved password extraction for: Opera, Firefox, Chrome 2021-01-28 10:19:27 +01:00
makikvues
27e8867236 - cleanup
- fixed using on IDisposables
2021-01-25 23:52:29 +01:00
makikvues
24754e374f - fixed missing comma 2021-01-25 22:46:53 +01:00
makikvues
23d3e1cd22 - added check PrintExecutablesInNonDefaultFoldersWithWritePermissions() 2021-01-25 22:46:14 +01:00
makikvues
2a0ab7bf77 - added search for hidden files in c:\users 2021-01-25 21:39:20 +01:00
makikvues
f5155d5eb4 - added PrintOtherUsersInterestingFiles check
- cleanup
2021-01-24 13:19:52 +01:00
makikvues
39c71eb4a3 - updated applocker implementation
- added logging to text file
- updated PermissionsHelper to allow searching only for write or equivalent permissions
- optimized StaticSID2GroupName
- updated printing in PrintCredManag
2021-01-23 16:38:35 +01:00
makikvues
4395b871d8 - updated PrintLinuxShells() - WSL checks 2021-01-22 11:41:19 +01:00
Emmanouil Perselis
d587c05833
Update Program.cs
I have added the option to write the output to a file when the parameter "log" is inserted. This is because I was not able to see the output when I was loading the exe with reflective PE injection in Powershell.
2021-01-21 17:43:24 +01:00
makikvues
e76e097627 - refactoring & cleanup
- updated Autorun checks
2021-01-19 23:56:26 +01:00
makikvues
a27ad66892 - Program and Main made public 2021-01-18 23:37:55 +01:00
makikvues
9dd1fdbc95 - scheduled tasks rewrite - cleanup, excluding also Microsoft from Path; skipping failed scheduled tasks
- added total execution time for debugging purposes
- bugfixes
- GetEverLoggedUsers() - skipping users which could not be translated
2021-01-18 22:12:01 +01:00
makikvues
e16234b773 - refactoring & cleanup
- TODO: first version of AppLocker implementation
- CredentialManager implementation
- added check of LsaCompatiblityLevel
- updated GetAutoRunsFolder
- updated PrintTranscriptPS
2021-01-17 23:38:39 +01:00
makikvues
448a1aaf5b - fixed getting data from clipboard
- fixed GetExecutableFromPath
- unified exception logging
- cleanup
2021-01-14 23:50:19 +01:00
makikvues
bf10cd7c0c - implemented quicker search with pre-caching search files/directories 2021-01-13 22:36:53 +01:00
makikvues
c8683a9a48 - added debug to usage 2021-01-10 20:40:01 +01:00
makikvues
ff030224fe - reverted new test search method
- added debugging information - memory, method execution time
2021-01-10 20:37:49 +01:00
makikvues
2f467a3405 - huge refactoring 2021-01-10 14:46:34 +01:00
makikvues
19f6cda357 - refactoring / cleanup
- split files into multiple classes
- implemented native wifi - getting saved credentials
- added registry helper
2021-01-08 19:46:15 +01:00
makikvues
d091dbcba5 - updated Watson + cleanup 2021-01-08 14:40:01 +01:00
makikvues
358b366408 - updated ignore list 2021-01-08 13:55:38 +01:00
makikvues
365848d9a1 - work in progress
- added measurement method to measure search speed
- added new search implementation using Parallel.ForEach
2021-01-07 23:23:10 +01:00
Carlos Polop
16fd60d99a
Update MyUtils.cs 2020-11-26 21:18:02 +00:00
Limn0
d0696edd18
updated color scheme
-purple
+readability
2020-10-09 15:08:57 +02:00
Limn0
50e67cb174
Re-write of WinPEAS.bat
+ added color-coded output
+ added progress tracking in percent
+ segmented code into pass-through functions for easier maintenance
o reformatted advisory message
o removed some ECHO. to save uniform whitespace
o fixed some typos
o more error-catching
2020-10-09 12:39:45 +02:00
Limn0
62f7ea3a94
fix typo & fix issue with weird echo on error messages 2020-10-09 00:27:54 +02:00
Chris Weinert
822e149c72 Add WiFi credential functionality 2020-09-24 17:06:54 -05:00
Carlos Polop
157e22ce0e
Update Program.cs 2020-09-20 23:23:04 +01:00
carlospolop
89bc4c527e winpeas 2020-09-02 09:54:37 +01:00
carlospolop
256b22d0dc Winpeas changes 2020-08-18 14:32:36 +01:00
carlospolop
59627f8e35 Winpeasv1.1 2020-08-16 15:37:51 +01:00
Carlos Polop
47cd142ca8
Merge pull request #56 from kazkansouh/device-driver-enum
3rd party device drive enum
2020-08-16 13:35:20 +01:00
Karim Kanso
07f1508267 3rd party device drive enum 2020-08-16 08:44:59 +01:00
pranavjoy
c734bf340f
Fixed typo "Foreing" to "Foreign" 2020-08-12 17:47:36 +02:00
Carlos Polop
1523bb1381
Update README.md 2020-08-11 11:51:12 +01:00
Carlos Polop
2e756a000b
Update README.md 2020-08-06 09:17:33 +01:00
carlospolop
e47619321d winpeasv1 2020-08-06 00:12:41 +01:00
Carlos Polop
3d0f4749bf
Update Beaprint.cs 2020-07-24 17:19:59 +01:00
carlos.polopmartin
ab1b188fb3 winpeas update 2020-06-24 16:18:15 +01:00
carlos.polopmartin
4d9ef3b97c winpeas update 2020-06-24 16:07:21 +01:00
Carlos Polop
808bde7617
Merge pull request #51 from Hackndo/powershell-history
Add Powershell history file
2020-06-24 15:22:42 +01:00
pixis
7618fc38f0 Add Powershell history file 2020-06-22 18:35:13 +02:00
pixis
81e6b3d396 Add User SID for complete access rights checks 2020-06-22 14:34:36 +02:00
Rob Fuller
16d2241872
Correct option
notansi isn't a valid option, however notcolor is.  ;-)
2020-06-03 21:57:10 -04:00
Carlos Polop
7843568837
Update winPEAS.bat 2020-04-27 21:41:07 +01:00
Carlos Polop
403e249d3b
Update Program.cs 2020-04-27 21:35:46 +01:00
Carlos Polop
8d5aed90e6
Update SystemInfo.cs 2020-04-27 21:35:07 +01:00
Carlos Polop
db0fe66e62
Update winPEAS.bat 2020-04-23 18:39:30 +01:00
Carlos Polop
a8b559e957
Update Program.cs 2020-04-22 16:38:46 +01:00