170 Commits

Author SHA1 Message Date
itm4n 3ff69f38ce Handle paths starting with \\?\ to avoid 'illegal characters in path' exceptions (issue #82) 2026-04-29 16:37:36 +02:00
itm4n 244bbef2d7 Reorganize code of main file 2026-04-29 15:55:28 +02:00
itm4n de09cc816f Split misc checks into separate files 2026-04-29 15:54:03 +02:00
itm4n 15880fe1a7 Update build script and profiles 2026-04-29 10:39:48 +02:00
itm4n 1247de7428 Split core reflection code 2026-04-29 10:38:19 +02:00
itm4n 48dc796153 Add check for RunAsPPLBoot registry value to fix false positive report on LSA Protection 2026-04-25 18:04:28 +02:00
itm4n c1e4443e75 Fix code logic in BitLocker check (issue #87) 2026-04-16 20:25:29 +02:00
itm4n 7c2a7eda49 Add missing TPM vendor IDs (issue #86) 2026-04-16 20:10:10 +02:00
itm4n 3f678959d3 Improve build script 2026-04-10 14:03:56 +02:00
itm4n 5fdc1297d7 Add AES encryption as a code obfuscation layer 2026-04-10 13:30:54 +02:00
itm4n f47c5d25eb Attempt to handle exceptions thrown by Get-MpPreference (issue #83) 2026-03-28 18:12:46 +01:00
itm4n 1a10429413 Refactor BitLocker check (issue #84) 2026-03-28 18:07:43 +01:00
itm4n 52c8ee7e29 Add progress status to process and thread permission check 2026-01-30 10:00:16 +01:00
itm4n 2147cec9bc Replace Get-EventLog with Get-WinEvent to avoid unhandled errors 2026-01-30 09:49:50 +01:00
itm4n dc80e357ce Add a check for Office Trusted Locations 2026-01-29 17:36:55 +01:00
itm4n a2d000e3bd Add a check for Office Protected View settings 2026-01-29 14:30:17 +01:00
itm4n 4a29d832bb Add a check for Office macro execution settings 2026-01-29 12:03:10 +01:00
itm4n 753be8ed23 Add a helper function for enumerating MS Office Trust Center settings 2026-01-29 11:50:39 +01:00
itm4n 9ba0e44ac7 Add AppLocker policy enumeration from Policy files 2026-01-28 14:44:43 +01:00
itm4n 5d61d7fcd1 Add MDE onboarding status and config check 2026-01-28 13:55:10 +01:00
itm4n e7b7e2b89c Add a check for SCOM Run As accounts 2026-01-21 16:14:17 +01:00
itm4n 223cd9498c Add missing Write-Progress statements 2026-01-14 14:44:11 +01:00
itm4n 0118d12ee4 Add progress status to service image file permission check 2025-12-25 17:55:23 +01:00
itm4n f4f738d51a Add progress status to service permission check 2025-12-25 17:48:55 +01:00
itm4n a5acfbef16 Add progress status to known vulnerable driver enumeration 2025-12-25 17:41:30 +01:00
itm4n e25e453f4c Add a check for enumerating whitelisted MSI files with interesting custom actions (issue #76) 2025-12-25 17:23:53 +01:00
itm4n 51bdb58ba3 Add private key file information to personal certificate enumeration 2025-12-25 12:57:45 +01:00
itm4n bae70eb111 Add machine and user personal certificate enumeration (issue #77) 2025-12-24 15:59:47 +01:00
itm4n e6f3ae9b6a Fix unhandled exception due to non-existing TPM Core Provisioning API (issue #80) 2025-12-14 17:23:02 +01:00
itm4n 496d985c01 Fix improper handling of read access errors on WMI object db file due to EDR denying access (issue #81) 2025-12-14 16:42:52 +01:00
itm4n 7379a19dca Handle AppId and TypeLibId parsing errors and print warning messages (issue #78) 2025-12-14 16:19:49 +01:00
itm4n 039c41eec4 Fixed a bug in IPv6 configuration check causing false positives 2025-12-14 15:45:42 +01:00
itm4n 6296ce3743 Fix incorrect count of vulnerable objects in root folder permission check (issue #79) 2025-11-19 15:06:09 +01:00
itm4n 26a6153e31 Moved Point and Print exploit PoC to distinct repository 2025-11-09 19:21:01 +01:00
itm4n 0799b56c11 Added progress status to application permission check and root folder permission check 2025-11-08 16:12:58 +01:00
itm4n d054272455 Removed multithreading to prevent crash under certain circumstances 2025-11-08 15:44:19 +01:00
itm4n fb56b2b67a Exclude named pipes owned by the current user 2025-10-07 17:29:58 +02:00
itm4n 9917b4ace5 Standardize check output 2025-10-07 15:17:13 +02:00
itm4n 31acb73d6f Fix improper handling of empty command lines (issue #74) 2025-10-07 10:04:17 +02:00
itm4n 3bff9e5073 Update and test build workflow 2025-10-06 21:59:53 +02:00
itm4n 2fdcae844a Fix include in PointAndPrint.ps1 build (issue #73) 2025-09-03 22:11:47 +02:00
itm4n 03e7644010 Fix improper handling of null data in cache 2025-09-01 13:36:48 +02:00
itm4n 67536b76dd Add helper for retrieving Credential Guard config and status 2025-08-30 18:33:19 +02:00
itm4n 23822d7c83 Fix vulnerable driver list parsing 2025-08-28 19:10:22 +02:00
itm4n aefaa79081 Remove release files from repository 2025-08-28 16:40:17 +02:00
itm4n 7c224d4d9b Use an arbitrary seed for reproducible builds 2025-08-26 15:20:20 +02:00
itm4n 329932da14 Standardize build process 2025-08-26 12:48:15 +02:00
itm4n dac5dd4170 Add a dedicated 'data' folder 2025-08-25 18:40:02 +02:00
itm4n 8e04d524d1 Add a cache entry for installed applications 2025-08-25 18:13:26 +02:00
itm4n 4096f6aa82 Add helpers for handling cached data 2025-08-25 18:06:16 +02:00