admin/mertdas-PrivKit
1
0
Fork 0
mirror of https://github.com/mertdas/PrivKit synced 2026-06-06 16:14:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5 from mertdas/revert-4-main

Browse Source 
Revert "Fix typo in PrivCheck.cna"
This commit is contained in:
Mert Daş
2026-01-20 23:08:48 +03:00
committed by GitHub
parent c0888b5fd2 42edc4b727
commit 276fc9074c
1 changed files with 14 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
PrivCheck.cna
+14 -14
View File
@@ -13,7 +13,7 @@ beacon_command_register(
"Description:\n" .
" Executes all privilege escalation checks in sequence:\n" .
" - AlwaysInstallElevatedCheck\n" .
" - AutoLogonCheck\n" .
" - AutologonCheck\n" .
" - CredentialManagerCheck\n" .
" - HijackablePathCheck\n" .
" - ModifiableAutorunCheck\n" .
@@ -55,16 +55,16 @@ alias PrivCheck {
berror($1, "[1/10] Could not load AlwaysInstallElevatedCheck BOF");
}
# AutoLogonCheck
$bofPath = script_resource("AutoLogonCheck/AutoLogonCheck. $+ $barch $+ .o");
# AutologonCheck
$bofPath = script_resource("AutologonCheck/AutologonCheck. $+ $barch $+ .o");
$handle = openf($bofPath);
$data = readb($handle, -1);
closef($handle);
if (strlen($data) > 0) {
btask($1, "[2/10] Running AutoLogonCheck...");
btask($1, "[2/10] Running AutologonCheck...");
beacon_inline_execute($1, $data, "go", $null);
} else {
berror($1, "[2/10] Could not load AutoLogonCheck BOF");
berror($1, "[2/10] Could not load AutologonCheck BOF");
}
# CredentialManagerCheck
@@ -216,13 +216,13 @@ alias AlwaysInstallElevatedCheck {
}
# ============================================
# AutoLogonCheck
# AutologonCheck
# ============================================
beacon_command_register(
"AutoLogonCheck",
"Check for stored AutoLogon credentials in registry",
"Usage: AutoLogonCheck\n\n" .
"AutologonCheck",
"Check for stored Autologon credentials in registry",
"Usage: AutologonCheck\n\n" .
"Description:\n" .
" Checks the Winlogon registry key for stored autologon credentials.\n" .
" If AutoAdminLogon=1 and DefaultPassword is set, credentials are exposed.\n\n" .
@@ -231,17 +231,17 @@ beacon_command_register(
"bof"
);
alias AutoLogonCheck {
alias AutologonCheck {
local('$barch $handle $data $bofPath');
if (size(@_) > 1) {
berror($1, "This command does not accept arguments.");
berror($1, "Usage: AutoLogonCheck");
berror($1, "Usage: AutologonCheck");
return;
}
$barch = barch($1);
$bofPath = script_resource("AutoLogonCheck/AutoLogonCheck. $+ $barch $+ .o");
$bofPath = script_resource("AutologonCheck/AutologonCheck. $+ $barch $+ .o");
$handle = openf($bofPath);
$data = readb($handle, -1);
@@ -253,7 +253,7 @@ alias AutoLogonCheck {
}
btask($1, "BOF by @merterpreter && @nickvourd");
btask($1, "Checking for stored AutoLogon credentials...");
btask($1, "Checking for stored Autologon credentials...");
beacon_inline_execute($1, $data, "go", $null);
}
@@ -616,4 +616,4 @@ alias ModifiableSVCCheck {
btask($1, "Checking for modifiable services...");
beacon_inline_execute($1, $data, "go", $null);
}
}