mirror of
https://github.com/itm4n/PrivescCheck
synced 2026-06-08 14:54:28 +00:00
285 lines
8.5 KiB
JSON
285 lines
8.5 KiB
JSON
{
|
|
"Files": [
|
|
{
|
|
"Id": "CORE_COMPRESSION",
|
|
"Path": ".\\src\\core\\Compression.ps1",
|
|
"Compression": false,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_MULTITHREADING",
|
|
"Path": ".\\src\\core\\Multithreading.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_REFLECTION_DYNAMIC_MODULE",
|
|
"Path": ".\\src\\core\\Reflection.DynamicModule.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_REFLECTION_ENUM",
|
|
"Path": ".\\src\\core\\Reflection.Enum.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_REFLECTION_STRUCTURE",
|
|
"Path": ".\\src\\core\\Reflection.Structure.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_REFLECTION_FUNCTION",
|
|
"Path": ".\\src\\core\\Reflection.Function.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_REFLECTION_WIN32_TYPE",
|
|
"Path": ".\\src\\core\\Reflection.Win32Type.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_WINAPI_ENUM",
|
|
"Path": ".\\src\\core\\WinApi.Enum.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_WINAPI_STRUCT",
|
|
"Path": ".\\src\\core\\WinApi.Struct.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_WINAPI_WRAPPERS",
|
|
"Path": ".\\src\\core\\WinApi.Wrappers.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CORE_WINAPI",
|
|
"Path": ".\\src\\core\\WinApi.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "HELPER_ACCESS_CONTROL",
|
|
"Path": ".\\src\\helper\\AccessControl.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "HELPER_CACHE",
|
|
"Path": ".\\src\\helper\\Cache.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "HELPER_ENVIRONMENT",
|
|
"Path": ".\\src\\helper\\Environment.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "HELPER_MSI",
|
|
"Path": ".\\src\\helper\\Msi.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "HELPER_SYSTEM_CONFIGURATION",
|
|
"Path": ".\\src\\helper\\SystemConfiguration.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "HELPER_SYSTEM_INFORMATION",
|
|
"Path": ".\\src\\helper\\SystemInformation.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "HELPER_UTILITY",
|
|
"Path": ".\\src\\helper\\Utility.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_APPLICATIONS",
|
|
"Path": ".\\src\\check\\Applications.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_CONFIGURATION",
|
|
"Path": ".\\src\\check\\Configuration.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_CREDENTIALS",
|
|
"Path": ".\\src\\check\\Credentials.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_GLOBALS",
|
|
"Path": ".\\src\\check\\Globals.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": [
|
|
{
|
|
"Tag": "VULNERABLE_DRIVERS",
|
|
"DataFile": "VulnerableDrivers.csv"
|
|
},
|
|
{
|
|
"Tag": "FILE_EXTENSION_ASSOCIATIONS",
|
|
"DataFile": "FileExtensionAssociations.csv"
|
|
},
|
|
{
|
|
"Tag": "CHECKS",
|
|
"DataFile": "Checks.csv"
|
|
},
|
|
{
|
|
"Tag": "ENDPOINT_PROTECTION_SIGNATURES",
|
|
"DataFile": "EndpointProtectionSignatures.csv"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"Id": "CHECK_HARDENING",
|
|
"Path": ".\\src\\check\\Hardening.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_MAIN",
|
|
"Path": ".\\src\\check\\Main.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_MISC_ACCESS_CONTROL",
|
|
"Path": ".\\src\\check\\Misc.AccessControl.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_MISC_ENVIRONMENT",
|
|
"Path": ".\\src\\check\\Misc.Environment.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_MISC_MSI",
|
|
"Path": ".\\src\\check\\Misc.Msi.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_MISC_SYSTEM_INFORMATION",
|
|
"Path": ".\\src\\check\\Misc.SystemInformation.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_NETWORK",
|
|
"Path": ".\\src\\check\\Network.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_SCHEDULED_TASKS",
|
|
"Path": ".\\src\\check\\ScheduledTasks.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_SERVICES",
|
|
"Path": ".\\src\\check\\Services.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_UPDATES",
|
|
"Path": ".\\src\\check\\Updates.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "CHECK_USER",
|
|
"Path": ".\\src\\check\\User.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
},
|
|
{
|
|
"Id": "EXPLOIT_POINT_AND_PRINT",
|
|
"Path": ".\\src\\exploit\\PointAndPrint.ps1",
|
|
"Compression": true,
|
|
"MatchAndReplace": null
|
|
}
|
|
],
|
|
"Includes": [
|
|
{
|
|
"Id": "CORE",
|
|
"Files": [
|
|
"CORE_COMPRESSION",
|
|
"CORE_REFLECTION_DYNAMIC_MODULE",
|
|
"CORE_REFLECTION_ENUM",
|
|
"CORE_REFLECTION_STRUCTURE",
|
|
"CORE_REFLECTION_FUNCTION",
|
|
"CORE_REFLECTION_WIN32_TYPE",
|
|
"CORE_WINAPI_ENUM",
|
|
"CORE_WINAPI_STRUCT",
|
|
"CORE_WINAPI_WRAPPERS",
|
|
"CORE_WINAPI"
|
|
]
|
|
},
|
|
{
|
|
"Id": "HELPERS",
|
|
"Files": [
|
|
"HELPER_ACCESS_CONTROL",
|
|
"HELPER_CACHE",
|
|
"HELPER_ENVIRONMENT",
|
|
"HELPER_MSI",
|
|
"HELPER_SYSTEM_CONFIGURATION",
|
|
"HELPER_SYSTEM_INFORMATION",
|
|
"HELPER_UTILITY"
|
|
]
|
|
},
|
|
{
|
|
"Id": "CHECKS",
|
|
"Files": [
|
|
"CHECK_GLOBALS",
|
|
"CHECK_MAIN",
|
|
"CHECK_USER",
|
|
"CHECK_SERVICES",
|
|
"CHECK_APPLICATIONS",
|
|
"CHECK_SCHEDULED_TASKS",
|
|
"CHECK_HARDENING",
|
|
"CHECK_CONFIGURATION",
|
|
"CHECK_NETWORK",
|
|
"CHECK_UPDATES",
|
|
"CHECK_CREDENTIALS",
|
|
"CHECK_MISC_ACCESS_CONTROL",
|
|
"CHECK_MISC_ENVIRONMENT",
|
|
"CHECK_MISC_MSI",
|
|
"CHECK_MISC_SYSTEM_INFORMATION"
|
|
]
|
|
}
|
|
],
|
|
"Profiles": [
|
|
{
|
|
"Id": "PRIVESC_CHECK",
|
|
"Name": "PrivescCheck",
|
|
"Includes": [
|
|
"CORE",
|
|
"HELPERS",
|
|
"CHECKS"
|
|
]
|
|
}
|
|
]
|
|
} |