admin/itm4n-PrivescCheck
1
0
Fork 0
mirror of https://github.com/itm4n/PrivescCheck synced 2026-06-08 14:54:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 7098469138 Add helper function for enumerating COM classes itm4n 2024-06-24 10:18:36 +02:00
  • d606191a2c Add command line to arguments parsing using Windows API itm4n 2024-06-24 10:16:27 +02:00
  • 251a1add45 Add code linting config for VS Code itm4n 2024-06-24 10:13:41 +02:00
  • e3a3f5a020 Fix build script itm4n 2024-06-24 10:12:36 +02:00
  • 64d6033ff3 Replace double quotes with simple quotes in CSV field itm4n 2024-06-22 23:30:19 +02:00
  • 7c27088c23 New script release itm4n 2024-06-22 23:24:59 +02:00
  • a88d9358fe Code linting itm4n 2024-06-22 23:22:48 +02:00
  • 92754a5ce0 Use helper function to retrieve current user's SID list itm4n 2024-06-22 22:02:24 +02:00
  • 429c2ef64e Add check for user privileges granted through GPOs itm4n 2024-06-22 21:49:53 +02:00
  • a4d2b49186 Move check list (CSV) to a dedicated file itm4n 2024-06-22 18:57:28 +02:00
  • d5b30a33a2 Add caching of asset files in build script itm4n 2024-06-22 17:38:11 +02:00
  • 7f93cd5fda Test domain membership using API NetWkstaGetInfo rather than the registry itm4n 2024-06-22 16:32:47 +02:00
  • ca05b7e665 Check LAPS only if machine is domain-joined itm4n 2024-06-22 12:51:34 +02:00
  • ec82a75d6a Restructure code base and update build script itm4n 2024-06-22 12:04:56 +02:00
  • ab74c93f0b New PrivescCheck release itm4n 2024-06-20 09:21:47 +02:00
  • d38088d181 Fix improper sorting of naa credentials itm4n 2024-06-20 09:15:00 +02:00
  • c323bcc6f7 Add SMB configuration check (issue #55) itm4n 2024-06-11 22:42:01 +02:00
  • 2a163c36e6 List Defender exclusions through Event Logs (issue #59) itm4n 2024-06-10 22:40:55 +02:00
  • f106e7b82d Add check for listing ASR rules (issue #57) itm4n 2024-06-10 21:12:13 +02:00
  • 5ca9749f1a New release itm4n 2024-06-02 18:13:07 +02:00
  • 864333b86b Remove redundant service unquoted path info check itm4n 2024-06-02 18:04:42 +02:00
  • f306cd7d27 Remove redundant hotfix history info check itm4n 2024-06-02 17:26:22 +02:00
  • eb49ada490 Remove redundant startup app info check itm4n 2024-06-02 17:18:15 +02:00
  • 33f1b1c94a Remove last startup time check itm4n 2024-06-02 17:06:25 +02:00
  • 8f74822dca Use Recurse flag instead of manual search in Get-ChildItem itm4n 2024-06-02 17:01:50 +02:00
  • b2a7777414 Code cleanup itm4n 2024-06-02 16:19:36 +02:00
  • 36cc9fae89 Remove dependency to Invoke-Expression itm4n 2024-06-02 16:18:38 +02:00
  • 3e435436c0 Fix a potential issue occurring when executing the script twice itm4n 2024-06-02 16:06:13 +02:00
  • 0d07bebd4a Add gitignore file itm4n 2024-06-02 15:52:23 +02:00
  • 6d84dcf560 Code linting itm4n 2024-06-02 15:49:08 +02:00
  • ab38137da0 Use script scope instead of global scope itm4n 2024-06-02 12:37:47 +02:00
  • 8e582386cb Replace Write-Host with Write-Output itm4n 2024-06-02 12:16:33 +02:00
  • 48fd6f0608 Remove trailing spaces in source files itm4n 2024-06-02 11:59:47 +02:00
  • 2c4df5454b Replace LF with CRLF in generated script itm4n 2024-06-01 20:02:40 +02:00
  • b59f51dc64 Rework the output of the MSI Custom Actions check to make it more readable itm4n 2024-06-01 19:51:59 +02:00
  • e98ec5068a Add reg key paths and values to Point and Print check output itm4n 2024-06-01 18:39:17 +02:00
  • 9b15ac8dff Prevent system folder paths from being returned as application paths itm4n 2024-06-01 18:29:43 +02:00
  • aecd52b9a9 Fix compatibility issues with PSv2 itm4n 2024-06-01 18:07:35 +02:00
  • 02712709ac New release itm4n 2024-06-01 17:43:48 +02:00
  • 7757fd7706 Rework README, and provide info about check types itm4n 2024-06-01 17:41:51 +02:00
  • 099b4d327d Refactor check type handling, and add 'Risky' attribute itm4n 2024-06-01 17:07:44 +02:00
  • 41de902d62 Check PowerShell script execution policy only if machine is domain-joined itm4n 2024-06-01 16:09:41 +02:00
  • f4eb07404d Fix issue #58 itm4n 2024-05-31 13:53:36 +02:00
  • 7d384bf88f Add a check for PowerShell script execution policy enforcement itm4n 2024-05-28 14:46:00 +02:00
  • 16329705f0 Add a check for PAC files retrieved over HTTP itm4n 2024-05-27 17:22:02 +02:00
  • 67095163cf Remove leftover code itm4n 2024-05-27 16:20:01 +02:00
  • c5aa68e88c Refactor SCCM cache folder checks itm4n 2024-05-27 15:46:58 +02:00
  • 92b239a18b Add a check to report whether an AppLocker policy is enforced itm4n 2024-05-24 11:20:56 +02:00
  • baf320dfb0 Fix a false negative in WSUS check itm4n 2024-05-23 09:25:08 +02:00
  • d5eece5310 Add a check for hidden file extensions itm4n 2024-05-22 13:43:43 +02:00
  • 3aa8f284b0 Add a check for default file extension associations itm4n 2024-03-11 21:20:15 +01:00
  • 9b077bc65f Add a function to query the executable or command associated to a file extension itm4n 2024-03-10 19:07:18 +01:00
  • 4883116dd4 Add a list of dangerous (default) file extension associations itm4n 2024-03-10 19:04:13 +01:00
  • 7851fd1a52 Add common file extensions (not just exe and dll) itm4n 2024-03-10 16:24:57 +01:00
  • 2ada84a67c Fix improper error handling during third-party kernel driver enumeration itm4n 2024-03-06 20:55:42 +01:00
  • 373014d6a7 Remove Windows Update enumeration through registry (fix issue #52) itm4n 2024-03-06 20:37:06 +01:00
  • def46d1349 Add test ID to output CSV file itm4n 2024-03-05 20:12:55 +01:00
  • db7d1f74b8 Check both LAPS legacy and LAPSv2 itm4n 2024-02-18 21:34:58 +00:00
  • 2b0903952d Update release scripts itm4n 2024-01-27 18:45:34 +01:00
  • f555354146 Add printer driver exploit itm4n 2024-01-27 18:43:22 +01:00
  • 76792aeccc Fix improper system architecture retrieval itm4n 2024-01-12 17:38:15 +01:00
  • f2117a9c5f Update Point and Print check itm4n 2024-01-12 17:07:42 +01:00
  • a38e50cc27 Update Point and Print check itm4n 2023-12-31 10:31:05 +01:00
  • c06b3ae0ab Fix output txt reports. itm4n 2023-12-30 19:43:31 +01:00
  • 81a89c46d8 Update Point and Print check itm4n 2023-12-30 19:25:36 +01:00
  • 8a91f9469a Update README.md Clément Labro 2023-12-26 10:39:44 +01:00
  • 118d876f38 Update README.md Clément Labro 2023-12-25 22:55:45 +01:00
  • dbc8fc0a55 Add a check for cached MSI files with potentially unsafe Custom Actions itm4n 2023-12-25 17:59:30 +01:00
  • 69ca8ffa92 Add missing word in description itm4n 2023-12-21 14:34:50 +01:00
  • b06a472fb8 Restore PSv2 compatibility itm4n 2023-12-19 12:00:10 +01:00
  • 333c4da79c Remove Code Analyzer decorators itm4n 2023-12-19 11:47:20 +01:00
  • af9bfd05f9 Add AppLocker policy check itm4n 2023-12-19 11:40:05 +01:00
  • 1e300b9268 Suppress warnings on unused variables defining structures itm4n 2023-12-07 12:06:54 +01:00
  • c85dbca84a Complete refactor of the Credential Guard check itm4n 2023-12-07 11:01:59 +01:00
  • 37d36566de Improve application permissions check output itm4n 2023-12-06 16:39:48 +01:00
  • 05e0db5ee7 Print*Nightmare*... itm4n 2023-12-06 16:20:52 +01:00
  • d76d4732a6 Update changelog itm4n 2023-12-05 22:35:16 +01:00
  • 0ff6d32eee Handle Wow64 filesystem redirection itm4n 2023-12-05 22:32:02 +01:00
  • e29f292d63 Make all raw output cells scrollable itm4n 2023-12-04 21:54:30 +01:00
  • 8948b29d08 Update build script itm4n 2023-12-01 03:22:22 +01:00
  • fa1e70bef7 Add SCCM NAA check itm4n 2023-12-01 03:15:33 +01:00
  • 62a430cf71 Restructure, continued... itm4n 2023-11-30 22:47:17 +01:00
  • 7ad5bb9bc6 Restrtucture and misc fixes itm4n 2023-11-30 22:46:42 +01:00
  • b1c82ef4c5 Restructure code itm4n 2023-11-23 18:25:06 +01:00
  • c448c6b59b Restore PSv2 compatibility itm4n 2023-11-22 16:13:08 +01:00
  • f99ef406f9 Fix status output itm4n 2023-10-24 22:25:39 +02:00
  • 010ed818b8 Improve output readability itm4n 2023-10-24 22:18:19 +02:00
  • 3fc7475a4a Filter out system directories when searching for modifiable apps itm4n 2023-09-03 17:14:30 +02:00
  • 13405c5936 Improve BIOS mode + Secure Boot check itm4n 2023-09-03 16:34:39 +02:00
  • 0250f7d29e Improve check result output itm4n 2023-09-03 16:11:40 +02:00
  • a7440de67b Update report style itm4n 2023-08-20 18:36:31 +02:00
  • 7272b59d7e Update check descriptions itm4n 2023-08-20 16:13:58 +02:00
  • a743e7aa27 Update changelog itm4n 2023-08-19 18:57:42 +02:00
  • 55ecd88c4a Remove 'compliance' attribute itm4n 2023-08-19 18:56:23 +02:00
  • 06af9753da Update descriptions itm4n 2023-08-19 18:36:21 +02:00
  • b529435135 Convert user privilege check to vulnerability check itm4n 2023-08-19 18:33:46 +02:00
  • 718044abda Convert BIOS mode compliance check to vulnerability check itm4n 2023-08-19 18:26:51 +02:00
  • aac333f4c4 Update description itm4n 2023-08-19 18:08:06 +02:00
  • 356389af58 Convert LSA protection compliance check to vulnerability check itm4n 2023-08-19 18:06:54 +02:00
  • b5165d31d3 Convert Driver Co-installer compliance check to vulnerability check itm4n 2023-08-19 17:59:37 +02:00