Files
2026-04-29 15:56:00 +02:00

285 lines
8.5 KiB
JSON

{
"Files": [
{
"Id": "CORE_COMPRESSION",
"Path": ".\\src\\core\\Compression.ps1",
"Compression": false,
"MatchAndReplace": null
},
{
"Id": "CORE_MULTITHREADING",
"Path": ".\\src\\core\\Multithreading.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CORE_REFLECTION_DYNAMIC_MODULE",
"Path": ".\\src\\core\\Reflection.DynamicModule.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CORE_REFLECTION_ENUM",
"Path": ".\\src\\core\\Reflection.Enum.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CORE_REFLECTION_STRUCTURE",
"Path": ".\\src\\core\\Reflection.Structure.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CORE_REFLECTION_FUNCTION",
"Path": ".\\src\\core\\Reflection.Function.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CORE_REFLECTION_WIN32_TYPE",
"Path": ".\\src\\core\\Reflection.Win32Type.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CORE_WINAPI_ENUM",
"Path": ".\\src\\core\\WinApi.Enum.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CORE_WINAPI_STRUCT",
"Path": ".\\src\\core\\WinApi.Struct.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CORE_WINAPI_WRAPPERS",
"Path": ".\\src\\core\\WinApi.Wrappers.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CORE_WINAPI",
"Path": ".\\src\\core\\WinApi.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "HELPER_ACCESS_CONTROL",
"Path": ".\\src\\helper\\AccessControl.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "HELPER_CACHE",
"Path": ".\\src\\helper\\Cache.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "HELPER_ENVIRONMENT",
"Path": ".\\src\\helper\\Environment.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "HELPER_MSI",
"Path": ".\\src\\helper\\Msi.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "HELPER_SYSTEM_CONFIGURATION",
"Path": ".\\src\\helper\\SystemConfiguration.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "HELPER_SYSTEM_INFORMATION",
"Path": ".\\src\\helper\\SystemInformation.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "HELPER_UTILITY",
"Path": ".\\src\\helper\\Utility.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_APPLICATIONS",
"Path": ".\\src\\check\\Applications.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_CONFIGURATION",
"Path": ".\\src\\check\\Configuration.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_CREDENTIALS",
"Path": ".\\src\\check\\Credentials.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_GLOBALS",
"Path": ".\\src\\check\\Globals.ps1",
"Compression": true,
"MatchAndReplace": [
{
"Tag": "VULNERABLE_DRIVERS",
"DataFile": "VulnerableDrivers.csv"
},
{
"Tag": "FILE_EXTENSION_ASSOCIATIONS",
"DataFile": "FileExtensionAssociations.csv"
},
{
"Tag": "CHECKS",
"DataFile": "Checks.csv"
},
{
"Tag": "ENDPOINT_PROTECTION_SIGNATURES",
"DataFile": "EndpointProtectionSignatures.csv"
}
]
},
{
"Id": "CHECK_HARDENING",
"Path": ".\\src\\check\\Hardening.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_MAIN",
"Path": ".\\src\\check\\Main.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_MISC_ACCESS_CONTROL",
"Path": ".\\src\\check\\Misc.AccessControl.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_MISC_ENVIRONMENT",
"Path": ".\\src\\check\\Misc.Environment.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_MISC_MSI",
"Path": ".\\src\\check\\Misc.Msi.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_MISC_SYSTEM_INFORMATION",
"Path": ".\\src\\check\\Misc.SystemInformation.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_NETWORK",
"Path": ".\\src\\check\\Network.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_SCHEDULED_TASKS",
"Path": ".\\src\\check\\ScheduledTasks.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_SERVICES",
"Path": ".\\src\\check\\Services.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_UPDATES",
"Path": ".\\src\\check\\Updates.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "CHECK_USER",
"Path": ".\\src\\check\\User.ps1",
"Compression": true,
"MatchAndReplace": null
},
{
"Id": "EXPLOIT_POINT_AND_PRINT",
"Path": ".\\src\\exploit\\PointAndPrint.ps1",
"Compression": true,
"MatchAndReplace": null
}
],
"Includes": [
{
"Id": "CORE",
"Files": [
"CORE_COMPRESSION",
"CORE_REFLECTION_DYNAMIC_MODULE",
"CORE_REFLECTION_ENUM",
"CORE_REFLECTION_STRUCTURE",
"CORE_REFLECTION_FUNCTION",
"CORE_REFLECTION_WIN32_TYPE",
"CORE_WINAPI_ENUM",
"CORE_WINAPI_STRUCT",
"CORE_WINAPI_WRAPPERS",
"CORE_WINAPI"
]
},
{
"Id": "HELPERS",
"Files": [
"HELPER_ACCESS_CONTROL",
"HELPER_CACHE",
"HELPER_ENVIRONMENT",
"HELPER_MSI",
"HELPER_SYSTEM_CONFIGURATION",
"HELPER_SYSTEM_INFORMATION",
"HELPER_UTILITY"
]
},
{
"Id": "CHECKS",
"Files": [
"CHECK_GLOBALS",
"CHECK_MAIN",
"CHECK_USER",
"CHECK_SERVICES",
"CHECK_APPLICATIONS",
"CHECK_SCHEDULED_TASKS",
"CHECK_HARDENING",
"CHECK_CONFIGURATION",
"CHECK_NETWORK",
"CHECK_UPDATES",
"CHECK_CREDENTIALS",
"CHECK_MISC_ACCESS_CONTROL",
"CHECK_MISC_ENVIRONMENT",
"CHECK_MISC_MSI",
"CHECK_MISC_SYSTEM_INFORMATION"
]
}
],
"Profiles": [
{
"Id": "PRIVESC_CHECK",
"Name": "PrivescCheck",
"Includes": [
"CORE",
"HELPERS",
"CHECKS"
]
}
]
}