makikvues
2a1d2cfb52
- implemented YAML checks
...
- updated sensitive_files.yaml
2021-07-06 13:57:25 +02:00
makikvues
6bfe947250
- introduced PermissionType - DEFAULT, EADABLE_OR_WRITABLE, WRITEABLE_OR_EQUIVALENT
...
- added AllowUnsafeBlocks for all configurations
2021-03-04 19:49:29 +01:00
makikvues
94f9bb72ac
- added domain argument (to enable enumeration of domain users)
...
- only local users enumerated by default
- added permissions check for SAM backups
- fixed GetPermissionsFile - did not process files without an extension
- added Read / ReadData permission to PermInt2Str
- updated WinPEAS.exe README.md
2021-03-02 20:36:08 +01:00
makikvues
1ceb041ee5
- updated PrintMcAffeSitelistFiles
...
- linpeas & lolbas checks running optionally if specified
2021-02-13 17:02:03 +01:00
makikvues
f3c7e92735
- added PrintLOLBAS
...
- added PrintInternetSettings
- added PrintPowerShellSessionSettings
- added PrintNtlmSettings
- added PrintRDPSettings
2021-02-11 22:36:39 +01:00
makikvues
49a4344730
- added PrintOffice365EndpointsSyncedByOneDrive
...
- added PrintOfficeMostRecentFiles
- added PrintCurrentTenantInfo
- cleanup
2021-02-10 22:58:18 +01:00
makikvues
df843d3825
- updated PrintWSLDistributions - running linpeas.sh in default WSL distribution
...
- added PrintLSAInfo
- added PrintLocalGroupPolicy
- added PrintLocalUsers
2021-02-09 22:51:16 +01:00
makikvues
647fe190ef
- added Brave browser credentials extraction
...
- added PowerOnEvents
- added PrintOutlookDownloads
- added PrintAuditPoliciesInfo
- added search keywords for keepass
2021-02-08 22:50:58 +01:00
makikvues
343b8bb96b
- refactoring/cleanup
...
- added .net versions check
- added PrintMappedDrivesWMI
- added PrintMicrosoftUpdatesCOM
- added PrintSystemLastShutdownTime
- added PrintCurrentUserIdleTime
- added PowerShell Core Version check
- updated ListCloudCreds
- updated GetMcAfeeSitelistFiles
- added PrintMachineAndUserCertificateFiles
2021-02-07 23:13:14 +01:00
makikvues
839e4a79ba
- rewrote Directory.Get* to Directory.Enumerate* to improve search speed
2021-02-04 21:07:56 +01:00
makikvues
cc24db3ff5
- cleanup & updates
2021-02-02 17:48:06 +01:00
makikvues
9a6e5d5831
- fixed namespaces
...
- added CredentialGuard check
- added Named Pipes enumeration
- added Printers enumeration
- added SysMon enumeration
- added Logon Sessions enumeration
- added SuperPutty config files check
- added Oracle SQL Developer Config files check
- added AMSI providers check
- added SCCM check
- fixed output formatting
2021-01-31 14:13:56 +01:00
makikvues
27e8867236
- cleanup
...
- fixed using on IDisposables
2021-01-25 23:52:29 +01:00
makikvues
24754e374f
- fixed missing comma
2021-01-25 22:46:53 +01:00
makikvues
23d3e1cd22
- added check PrintExecutablesInNonDefaultFoldersWithWritePermissions()
2021-01-25 22:46:14 +01:00
makikvues
2a0ab7bf77
- added search for hidden files in c:\users
2021-01-25 21:39:20 +01:00
makikvues
f5155d5eb4
- added PrintOtherUsersInterestingFiles check
...
- cleanup
2021-01-24 13:19:52 +01:00
makikvues
4395b871d8
- updated PrintLinuxShells() - WSL checks
2021-01-22 11:41:19 +01:00
makikvues
e16234b773
- refactoring & cleanup
...
- TODO: first version of AppLocker implementation
- CredentialManager implementation
- added check of LsaCompatiblityLevel
- updated GetAutoRunsFolder
- updated PrintTranscriptPS
2021-01-17 23:38:39 +01:00
makikvues
bf10cd7c0c
- implemented quicker search with pre-caching search files/directories
2021-01-13 22:36:53 +01:00
makikvues
ff030224fe
- reverted new test search method
...
- added debugging information - memory, method execution time
2021-01-10 20:37:49 +01:00
makikvues
2f467a3405
- huge refactoring
2021-01-10 14:46:34 +01:00
