Commit Graph

  • 3ff69f38ce Handle paths starting with \\?\ to avoid 'illegal characters in path' exceptions (issue #82) master 2026.04.29-1 itm4n 2026-04-29 16:37:36 +02:00
  • 4a4f776c0c Update build profiles itm4n 2026-04-29 15:56:00 +02:00
  • 244bbef2d7 Reorganize code of main file itm4n 2026-04-29 15:55:28 +02:00
  • de09cc816f Split misc checks into separate files itm4n 2026-04-29 15:54:03 +02:00
  • 16f75e90f5 Slightly obfuscate a few key strings itm4n 2026-04-29 10:41:02 +02:00
  • 15880fe1a7 Update build script and profiles itm4n 2026-04-29 10:39:48 +02:00
  • 1247de7428 Split core reflection code itm4n 2026-04-29 10:38:19 +02:00
  • 48dc796153 Add check for RunAsPPLBoot registry value to fix false positive report on LSA Protection itm4n 2026-04-25 18:04:28 +02:00
  • c1e4443e75 Fix code logic in BitLocker check (issue #87) 2026.04.16-1 itm4n 2026-04-16 20:25:29 +02:00
  • 7c2a7eda49 Add missing TPM vendor IDs (issue #86) itm4n 2026-04-16 20:10:10 +02:00
  • 6c11798653 Update seed 2026.04.10-1 itm4n 2026-04-10 14:11:11 +02:00
  • ac3ed1ce5a Suppress Write-Host use warnings itm4n 2026-04-10 14:04:51 +02:00
  • 3f678959d3 Improve build script itm4n 2026-04-10 14:03:56 +02:00
  • 5fdc1297d7 Add AES encryption as a code obfuscation layer itm4n 2026-04-10 13:30:54 +02:00
  • 2a7b5d4e91 Add a job to delete old releases and tags itm4n 2026-03-29 16:59:41 +02:00
  • f4cf414305 Delete dist file itm4n 2026-03-28 19:43:50 +01:00
  • f47c5d25eb Attempt to handle exceptions thrown by Get-MpPreference (issue #83) 2026.03.28-1 itm4n 2026-03-28 18:12:46 +01:00
  • 29711f9f15 Update gitignore file itm4n 2026-03-28 18:09:49 +01:00
  • 1a10429413 Refactor BitLocker check (issue #84) itm4n 2026-03-28 18:07:43 +01:00
  • 49943fb287 Update gitignore file itm4n 2026-03-28 18:05:48 +01:00
  • 88a5f58100 Improve build workflow 2026.01.30-1 itm4n 2026-01-30 14:31:31 +01:00
  • 4d76f1bccb Simplify README itm4n 2026-01-30 10:20:10 +01:00
  • 52c8ee7e29 Add progress status to process and thread permission check itm4n 2026-01-30 10:00:16 +01:00
  • 2147cec9bc Replace Get-EventLog with Get-WinEvent to avoid unhandled errors itm4n 2026-01-30 09:49:50 +01:00
  • dc80e357ce Add a check for Office Trusted Locations itm4n 2026-01-29 17:36:55 +01:00
  • a2d000e3bd Add a check for Office Protected View settings itm4n 2026-01-29 14:30:17 +01:00
  • 4a29d832bb Add a check for Office macro execution settings itm4n 2026-01-29 12:03:10 +01:00
  • 753be8ed23 Add a helper function for enumerating MS Office Trust Center settings itm4n 2026-01-29 11:50:39 +01:00
  • 9ba0e44ac7 Add AppLocker policy enumeration from Policy files itm4n 2026-01-28 14:44:43 +01:00
  • 5d61d7fcd1 Add MDE onboarding status and config check itm4n 2026-01-28 13:55:10 +01:00
  • d7d936d73c Update seed 2026.01.26-1 itm4n 2026-01-26 14:09:08 +01:00
  • e7b7e2b89c Add a check for SCOM Run As accounts itm4n 2026-01-21 16:14:17 +01:00
  • 223cd9498c Add missing Write-Progress statements 2026.01.14-2 itm4n 2026-01-14 14:44:11 +01:00
  • 2fcd64110b Fix build workflow itm4n 2026-01-14 14:30:53 +01:00
  • 416492c6c0 Update data files (job) 2026.01.14-1 itm4n 2026-01-14 13:08:22 +00:00
  • 043bace283 Update seed 2025.12.25-1 itm4n 2025-12-25 18:52:30 +01:00
  • 8000ef71c6 Fix incomplete Write-Progress itm4n 2025-12-25 18:05:17 +01:00
  • 0118d12ee4 Add progress status to service image file permission check itm4n 2025-12-25 17:55:23 +01:00
  • f4f738d51a Add progress status to service permission check itm4n 2025-12-25 17:48:55 +01:00
  • a5acfbef16 Add progress status to known vulnerable driver enumeration itm4n 2025-12-25 17:41:30 +01:00
  • e25e453f4c Add a check for enumerating whitelisted MSI files with interesting custom actions (issue #76) itm4n 2025-12-25 17:23:24 +01:00
  • 51bdb58ba3 Add private key file information to personal certificate enumeration itm4n 2025-12-25 12:57:45 +01:00
  • bae70eb111 Add machine and user personal certificate enumeration (issue #77) 2025.12.24-1 itm4n 2025-12-24 15:59:47 +01:00
  • e6f3ae9b6a Fix unhandled exception due to non-existing TPM Core Provisioning API (issue #80) itm4n 2025-12-14 17:23:02 +01:00
  • 496d985c01 Fix improper handling of read access errors on WMI object db file due to EDR denying access (issue #81) itm4n 2025-12-14 16:42:52 +01:00
  • 7379a19dca Handle AppId and TypeLibId parsing errors and print warning messages (issue #78) itm4n 2025-12-14 16:19:49 +01:00
  • 039c41eec4 Fixed a bug in IPv6 configuration check causing false positives itm4n 2025-12-14 15:45:42 +01:00
  • 6296ce3743 Fix incorrect count of vulnerable objects in root folder permission check (issue #79) itm4n 2025-11-19 15:06:09 +01:00
  • 26a6153e31 Moved Point and Print exploit PoC to distinct repository itm4n 2025-11-09 19:21:01 +01:00
  • f95a4724af Update seed itm4n 2025-11-08 16:13:52 +01:00
  • 0799b56c11 Added progress status to application permission check and root folder permission check itm4n 2025-11-08 16:12:58 +01:00
  • 8cb63b1427 Fix issue #75 by making sure location is not null itm4n 2025-11-08 15:49:49 +01:00
  • d054272455 Removed multithreading to prevent crash under certain circumstances itm4n 2025-11-08 15:44:19 +01:00
  • 6a1001db19 Changed type COM class checks from Base to Extended itm4n 2025-11-08 15:42:19 +01:00
  • fb56b2b67a Exclude named pipes owned by the current user itm4n 2025-10-07 17:29:58 +02:00
  • 9917b4ace5 Standardize check output itm4n 2025-10-07 15:17:13 +02:00
  • 31acb73d6f Fix improper handling of empty command lines (issue #74) itm4n 2025-10-07 10:04:17 +02:00
  • 3bff9e5073 Update and test build workflow itm4n 2025-10-06 21:59:53 +02:00
  • 2d42e45ee1 Fix a typo itm4n 2025-10-06 17:39:06 +02:00
  • fe7b178bd8 Update gitignore to ignore MD files except README and info files itm4n 2025-10-06 16:43:17 +02:00
  • 2fdcae844a Fix include in PointAndPrint.ps1 build (issue #73) itm4n 2025-09-03 22:11:47 +02:00
  • dbfc4098a2 Update data files (job) itm4n 2025-09-01 11:37:54 +00:00
  • 03e7644010 Fix improper handling of null data in cache itm4n 2025-09-01 13:36:48 +02:00
  • 02abbbbe02 Update README itm4n 2025-08-31 09:31:01 +02:00
  • 2f6a80cb9d Update NTLMv1 downgrade attack check itm4n 2025-08-30 18:34:13 +02:00
  • 67536b76dd Add helper for retrieving Credential Guard config and status itm4n 2025-08-30 18:31:02 +02:00
  • 43d01f32ac Update README itm4n 2025-08-28 19:36:30 +02:00
  • 23822d7c83 Fix vulnerable driver list parsing itm4n 2025-08-28 19:10:22 +02:00
  • aefaa79081 Remove release files from repository itm4n 2025-08-28 16:36:54 +02:00
  • ea0cdae660 Add auto update of LOL driver list itm4n 2025-08-28 12:58:52 +02:00
  • a9eaef0716 Refactor LOL driver list update management in build script itm4n 2025-08-27 14:19:40 +02:00
  • c5f96d0497 Fix build workflow itm4n 2025-08-26 22:43:02 +02:00
  • f332ed710b Add debug to release tag script itm4n 2025-08-26 22:29:40 +02:00
  • ab77bdaef2 Fix build workflow (hopefully...) itm4n 2025-08-26 22:13:02 +02:00
  • 1b49e16c03 Update build workflow itm4n 2025-08-26 22:07:03 +02:00
  • 4f409a3a06 Fix build workflow itm4n 2025-08-26 21:52:22 +02:00
  • 69a983cb67 Fix gh release command in workflow itm4n 2025-08-26 21:32:52 +02:00
  • 0c8b65f123 Edit workflow name itm4n 2025-08-26 21:29:13 +02:00
  • 35fa35c1e8 Fix incorrect branch name in workflow itm4n 2025-08-26 21:27:03 +02:00
  • 3b61d537ff Fixed workflow dir path itm4n 2025-08-26 21:22:32 +02:00
  • 3790c756d0 Add a build workflow itm4n 2025-08-26 21:20:14 +02:00
  • d3a68c6186 Update build script itm4n 2025-08-26 21:09:38 +02:00
  • 0908543e10 New script release itm4n 2025-08-26 15:38:35 +02:00
  • 7c224d4d9b Use an arbitrary seed for reproducible builds itm4n 2025-08-26 15:20:20 +02:00
  • 329932da14 Standardize build process itm4n 2025-08-26 12:48:15 +02:00
  • 114ac1d8a0 Refactor data handling itm4n 2025-08-25 20:24:42 +02:00
  • dac5dd4170 Add a dedicated 'data' folder itm4n 2025-08-25 18:39:22 +02:00
  • 9a43edac9b Fixed improper cache clearing itm4n 2025-08-25 18:37:02 +02:00
  • 8e04d524d1 Add a cache entry for installed applications itm4n 2025-08-25 18:13:26 +02:00
  • 4096f6aa82 Add helpers for handling cached data itm4n 2025-08-25 18:06:16 +02:00
  • 05eb405929 Remove useless warning messages (COM object enumeration) itm4n 2025-08-25 17:02:24 +02:00
  • 31a7730cf0 Improve check naming itm4n 2025-08-25 16:54:03 +02:00
  • ae4b321e94 Rewrite application enumeration helper and check itm4n 2025-08-25 16:22:07 +02:00
  • 4567ecf82e New script release itm4n 2025-08-21 10:22:14 +02:00
  • 9e85b4258e Rewrite named kernel object permission check itm4n 2025-08-21 10:21:08 +02:00
  • ed32fde09f Add missing NTLM min sec description itm4n 2025-08-20 18:29:45 +02:00
  • 9ea248ad92 New script release itm4n 2025-08-19 18:39:58 +02:00
  • 7768626a4b Add a check for NTLM downgrade attacks itm4n 2025-08-19 18:08:38 +02:00
  • 22947041cc Remove MSI custom action check from default scans itm4n 2025-08-19 16:25:51 +02:00
  • 30395406dc Rewrite named pipe permission check itm4n 2025-08-19 16:11:47 +02:00