Commit Graph

  • 2c675218c4 Refactor UAC check itm4n 2023-08-19 17:52:06 +02:00
  • beaf36d271 Refactor Airstrike attack check itm4n 2023-08-19 17:38:03 +02:00
  • 5a10da51b6 Refactor WLAN profile check itm4n 2023-08-19 17:26:58 +02:00
  • 31b23f0a16 Refactor Point and Print config check itm4n 2023-08-19 17:20:51 +02:00
  • 61ca7743df Refactor AlwaysInstallElevated check itm4n 2023-08-19 17:12:26 +02:00
  • ab7b9b3590 Convert Credential Guard compliance check to vulnerability check itm4n 2023-08-19 16:42:45 +02:00
  • 45c8bfed3e Fix descriptions itm4n 2023-08-19 13:48:04 +02:00
  • 56478d67a7 Sort results by severity itm4n 2023-08-19 13:20:04 +02:00
  • 23aa62ff64 Convert UAC compliance check to vulnerability check itm4n 2023-08-19 13:00:04 +02:00
  • 2c6e6b982c Convert LAPS compliance check to vulnerability check itm4n 2023-08-19 12:15:51 +02:00
  • f02b6fe0d4 Convert BitLocker compliance check to vulnerability check itm4n 2023-08-19 11:45:47 +02:00
  • 490f832cec Rework script output itm4n 2023-08-14 22:08:09 +02:00
  • e1fa7f802c Fix a false negative, Credential Guard reported as 'not running' when enabled by default itm4n 2023-08-13 16:27:52 +02:00
  • 1e3f8e7056 Fix latent issue that could cause module names to overlap itm4n 2023-07-22 15:39:04 +02:00
  • d11e08ed64 Store only one hash type per LOL driver to reduce script size itm4n 2023-07-22 15:30:33 +02:00
  • 0ba976eed9 Fix issue #48 (false negatives in Invoke-ServicesUnquotedPathCheck itm4n 2023-07-18 05:51:15 +02:00
  • 7e2b08e747 Fix leaked handle enumeration in PSv2 itm4n 2023-07-10 14:47:42 +02:00
  • 3aeedea915 Add check for vuln drivers + restructure code itm4n 2023-07-10 14:21:12 +02:00
  • b8678acabe Update the build script to use random names for the variables itm4n 2023-07-02 17:42:37 +02:00
  • 93b45ac1cc Update the license... itm4n 2023-07-02 16:45:04 +02:00
  • 46458a32d9 Refactor the Point and Print config check itm4n 2023-07-02 16:44:19 +02:00
  • 3d3c4d4534 Fix Point and Print config check itm4n 2023-06-28 17:40:30 +02:00
  • 7a4b66ca98 Fix Point and Print config check itm4n 2023-06-28 16:41:52 +02:00
  • 0ed76558fc Fix Point and Print config check itm4n 2023-06-28 16:35:53 +02:00
  • 5fe766ad3b Build script itm4n 2023-06-28 16:09:33 +02:00
  • 05e8aeb2d9 Update changelog itm4n 2023-06-28 16:08:33 +02:00
  • 22f3da6062 Fix Point and Print config check itm4n 2023-06-28 16:07:07 +02:00
  • 7cbadf50a0 Improve BitLocker check itm4n 2023-06-18 19:30:55 +02:00
  • 361d72f463 Add StorSvc phantom DLL + links to resources for all known phantom DLLs itm4n 2023-05-21 19:00:48 +02:00
  • 7366d6cc56 Improve clarity in regards to compliance results itm4n 2023-05-21 18:27:20 +02:00
  • fc8aa6fb25 Add a check for third-party drivers itm4n 2023-02-19 18:53:31 +01:00
  • 446d9e0abf Fix issue #43 (empty WinLogon passwords) itm4n 2023-02-18 14:15:10 +01:00
  • 69366b0aaf Minor modifications aimed at bypassing Cortex XDR detection itm4n 2023-02-18 14:09:09 +01:00
  • e1567e62d4 Fix issue #41 (Windows 11 version number) itm4n 2023-01-29 22:46:40 +01:00
  • 326e002470 Fix issue #40 itm4n 2022-11-23 16:37:16 +01:00
  • 2d6ad76c6b Simplify README itm4n 2022-11-07 21:28:58 +01:00
  • 642b52a28d Ignore Get-Process errors for TCP/UDP endpoints itm4n 2022-11-07 21:09:08 +01:00
  • c783d86128 Add a check, fix a few things, and improve performance itm4n 2022-11-06 20:17:29 +01:00
  • 7f9efa0a47 Reword Airstrike check (title & desc) itm4n 2022-10-30 17:20:25 +01:00
  • 5be9e4a553 Remove all comments when building the script itm4n 2022-10-30 17:08:12 +01:00
  • 82e3619e90 Update README itm4n 2022-10-02 17:59:19 +02:00
  • 8571278120 Clarify README and add Metasploit workaround itm4n 2022-10-02 17:56:13 +02:00
  • 839b46a20e Strip null byte from token source itm4n 2022-10-02 16:51:02 +02:00
  • c54acf3e3d Properly check deny-only groups itm4n 2022-10-02 15:46:41 +02:00
  • 60914898cc Improved Get-AclModificationRights itm4n 2022-08-14 19:13:59 +02:00
  • b80e9100f2 Complete rewrite of DACL checking itm4n 2022-08-07 17:04:31 +02:00
  • 3b106ad47e Report DisableWindowsUpdateAccess in WSUS check itm4n 2022-06-08 17:51:24 +02:00
  • 6fe402ce62 Filter out system PATH entries that contain only spaces itm4n 2022-06-08 16:37:24 +02:00
  • 16cd833d12 Code cleanup itm4n 2022-04-07 17:10:13 +02:00
  • 45596ff4bb Remove trailing spaces & Update Builder itm4n 2022-04-07 14:15:22 +02:00
  • 334895d537 Add Wi-Fi 802.1x and Aitstrike checks itm4n 2022-03-13 19:37:37 +01:00
  • b641d809c4 Fixed typo in Invoke-PrintNightmareCheck (build) itm4n 2022-03-10 09:04:39 +01:00
  • e01d24dc11 Fixed typo in Invoke-PrintNightmareCheck itm4n 2022-03-10 09:04:14 +01:00
  • 0506c16358 Refactor all registry key checks itm4n 2022-03-08 21:55:36 +01:00
  • 24e5a4157b Improved Config > Invoke-PrintNightmareCheck itm4n 2022-03-08 17:03:02 +01:00
  • 44bb33e971 Improved Config > Invoke-PrintNightmareCheck itm4n 2022-03-08 16:50:46 +01:00
  • dc14b2ef4b Add cleaned up changelog file itm4n 2022-03-08 15:15:02 +01:00
  • c5d44a775d Clean up changelog file itm4n 2022-03-08 15:14:05 +01:00
  • be21812556 Fixed Write-Progress issue in non-console windows itm4n 2022-03-06 12:27:16 +01:00
  • 885c7742dd Add Misc > Invoke-UserSessionListCheck itm4n 2022-02-19 00:00:18 +01:00
  • 3f2d58f518 Add Config > Invoke-HardenedUNCPathCheck itm4n 2022-02-13 18:46:58 +01:00
  • 69866a9c75 Fixed a var name type itm4n 2022-02-10 10:58:57 +01:00
  • 70f1da3f4b Improved UAC settings check itm4n 2022-01-27 21:39:19 +01:00
  • be0224542e Refactored compliance assessment itm4n 2022-01-26 19:47:19 +01:00
  • b97981a8fb Add check for Defender exclusions itm4n 2022-01-13 20:45:40 +01:00
  • 0c6e75a49c Modified loader itm4n 2021-11-28 18:32:20 +01:00
  • ea964c41c3 Fixed version check issue (compat. mode) itm4n 2021-11-27 19:03:58 +01:00
  • d83ad3781b Improved PrintNightmare check (issue #21) itm4n 2021-11-04 21:30:12 +01:00
  • 63dec156dd Fixed error handling (issue #28) itm4n 2021-11-04 20:59:38 +01:00
  • 2a846493e3 Reimplementation of audit mode itm4n 2021-10-11 16:27:15 +02:00
  • 0838c945e0 Add audit capabilities itm4n 2021-10-10 18:41:28 +02:00
  • 160afe75ac Fixed a memory management issue (privileges) itm4n 2021-09-25 19:43:05 +02:00
  • 154e2bbfdd Fixed a memory management issue itm4n 2021-09-25 19:28:59 +02:00
  • ea9fb51568 Save script as ASCII to reduce file size itm4n 2021-09-13 19:33:46 +02:00
  • 4d45421a5d Added a check for Driver Co-Installers itm4n 2021-09-13 19:21:47 +02:00
  • 43899764d7 Updated the output of Invoke-ServicesPermissionsRegistryCheck itm4n 2021-09-03 16:40:24 +02:00
  • d72c6734e6 Put Get-Acl in try/catch block itm4n 2021-09-03 16:26:48 +02:00
  • ca1926d809 Add a Remote option for Invoke-WinlogonCheck itm4n 2021-09-01 18:35:49 +02:00
  • 7bbb24beab Time to say goodbye to old PrivescCheck itm4n 2021-08-19 22:31:42 +02:00
  • 380025f1e0 Color update itm4n 2021-08-19 22:30:56 +02:00
  • e3a5c0c191 New build itm4n 2021-08-19 21:45:17 +02:00
  • 8ecb780993 Sanitize raw result before XML export itm4n 2021-08-19 21:44:46 +02:00
  • fd6f21665d Added Invoke-SensitiveHiveShadowCopyCheck itm4n 2021-08-17 22:40:57 +02:00
  • 568d82dd5c Fixed major bug in service type collection unknown 2021-07-29 11:19:46 +02:00
  • fcc1ee4f18 Added a check for PrintNightmare unknown 2021-07-23 23:53:51 +02:00
  • cf4fb80c1a New build unknown 2021-07-20 19:04:26 +02:00
  • ff9dc1daff Updated check description unknown 2021-07-20 19:04:06 +02:00
  • 477dccb784 Check for read access on SAM file unknown 2021-07-20 18:56:12 +02:00
  • 0c9ae276da Reports can now be exported as XML files unknown 2021-07-09 16:08:27 +02:00
  • de073fa01a Added SeRelabelPrivilege as exploitable privilege (new build) unknown 2021-07-09 12:39:22 +02:00
  • 5d4bd949e9 Added SeRelabelPrivilege as exploitable privilege unknown 2021-07-09 12:38:45 +02:00
  • 36f3a2621d Updated network adapter check to list all Eth/Wifi adapters unknown 2021-07-09 12:37:18 +02:00
  • 948f04f1a4 Merged update info/vuln checks unknown 2021-07-09 11:37:43 +02:00
  • 203e3d158f Merged sccm cache folder info/vuln checks unknown 2021-07-09 11:16:31 +02:00
  • 3e8b979c76 Removed uncessary commented code unknown 2021-07-09 10:55:41 +02:00
  • 6416a0b71e Merged startup app info/vuln checks unknown 2021-07-09 10:54:23 +02:00
  • 3b5b2b4c10 Merged service unquoted path info/vuln checks unknown 2021-07-09 10:30:48 +02:00
  • a84dec4cb6 Marked sch. task unquoted path check as experimental unknown 2021-06-27 16:18:11 +02:00
  • 8f9e8bb7c6 Unquoted path check refactoring and splitting unknown 2021-06-22 10:06:33 +02:00
  • 935dd21130 WSUS check refactoring and update unknown 2021-06-22 03:04:44 +02:00