makikvues
74d4b2dfe9
- updated README.md
2021-02-14 10:39:58 +01:00
makikvues
6a99882f85
- suppressing chrome decrypt credentials error
2021-02-13 17:33:15 +01:00
makikvues
1ceb041ee5
- updated PrintMcAffeSitelistFiles
...
- linpeas & lolbas checks running optionally if specified
2021-02-13 17:02:03 +01:00
makikvues
d6d7b4e0e0
- removed CMD checks
...
- small cleanup
- updated PrintAppCmd
- updated AutoRuns checks
2021-02-13 11:13:26 +01:00
makikvues
f3c7e92735
- added PrintLOLBAS
...
- added PrintInternetSettings
- added PrintPowerShellSessionSettings
- added PrintNtlmSettings
- added PrintRDPSettings
2021-02-11 22:36:39 +01:00
makikvues
49a4344730
- added PrintOffice365EndpointsSyncedByOneDrive
...
- added PrintOfficeMostRecentFiles
- added PrintCurrentTenantInfo
- cleanup
2021-02-10 22:58:18 +01:00
makikvues
df843d3825
- updated PrintWSLDistributions - running linpeas.sh in default WSL distribution
...
- added PrintLSAInfo
- added PrintLocalGroupPolicy
- added PrintLocalUsers
2021-02-09 22:51:16 +01:00
makikvues
647fe190ef
- added Brave browser credentials extraction
...
- added PowerOnEvents
- added PrintOutlookDownloads
- added PrintAuditPoliciesInfo
- added search keywords for keepass
2021-02-08 22:50:58 +01:00
makikvues
343b8bb96b
- refactoring/cleanup
...
- added .net versions check
- added PrintMappedDrivesWMI
- added PrintMicrosoftUpdatesCOM
- added PrintSystemLastShutdownTime
- added PrintCurrentUserIdleTime
- added PowerShell Core Version check
- updated ListCloudCreds
- updated GetMcAfeeSitelistFiles
- added PrintMachineAndUserCertificateFiles
2021-02-07 23:13:14 +01:00
makikvues
839e4a79ba
- rewrote Directory.Get* to Directory.Enumerate* to improve search speed
2021-02-04 21:07:56 +01:00
makikvues
2f4c58d202
- commented out CleanLists
2021-02-03 22:18:37 +01:00
makikvues
fb17429f67
- refactoring / cleanup - moved all native external methods to /Native folder/classes
...
- added new event checks - Explicit Logon Events, Logon Events, PowerShell Events, Process Creation Events
- added PrintSecurityPackagesCredentials check
- added Windows Defender enumeration
2021-02-03 21:54:20 +01:00
makikvues
cc24db3ff5
- cleanup & updates
2021-02-02 17:48:06 +01:00
makikvues
80288c568a
- removed throwing exceptions in Chrome, Opera
2021-02-02 17:19:31 +01:00
makikvues
86bf58f45c
- fixed compilation symbols for all releases / configurations
...
- added Slack check
2021-02-02 15:58:22 +01:00
makikvues
c2d7f1b5b0
- updates & fixes
2021-01-31 18:48:44 +01:00
makikvues
7bbe71d290
- uncommented CreateDynamicLists
2021-01-31 18:17:30 +01:00
makikvues
8a8393dcc8
- updated listening ports enumeration check - added process pid + name
2021-01-31 18:12:22 +01:00
makikvues
9a6e5d5831
- fixed namespaces
...
- added CredentialGuard check
- added Named Pipes enumeration
- added Printers enumeration
- added SysMon enumeration
- added Logon Sessions enumeration
- added SuperPutty config files check
- added Oracle SQL Developer Config files check
- added AMSI providers check
- added SCCM check
- fixed output formatting
2021-01-31 14:13:56 +01:00
makikvues
977e183068
- added saved password extraction for: Opera, Firefox, Chrome
2021-01-28 10:19:27 +01:00
makikvues
27e8867236
- cleanup
...
- fixed using on IDisposables
2021-01-25 23:52:29 +01:00
makikvues
24754e374f
- fixed missing comma
2021-01-25 22:46:53 +01:00
makikvues
23d3e1cd22
- added check PrintExecutablesInNonDefaultFoldersWithWritePermissions()
2021-01-25 22:46:14 +01:00
makikvues
2a0ab7bf77
- added search for hidden files in c:\users
2021-01-25 21:39:20 +01:00
makikvues
f5155d5eb4
- added PrintOtherUsersInterestingFiles check
...
- cleanup
2021-01-24 13:19:52 +01:00
makikvues
39c71eb4a3
- updated applocker implementation
...
- added logging to text file
- updated PermissionsHelper to allow searching only for write or equivalent permissions
- optimized StaticSID2GroupName
- updated printing in PrintCredManag
2021-01-23 16:38:35 +01:00
makikvues
4395b871d8
- updated PrintLinuxShells() - WSL checks
2021-01-22 11:41:19 +01:00
makikvues
e76e097627
- refactoring & cleanup
...
- updated Autorun checks
2021-01-19 23:56:26 +01:00
makikvues
a27ad66892
- Program and Main made public
2021-01-18 23:37:55 +01:00
makikvues
9dd1fdbc95
- scheduled tasks rewrite - cleanup, excluding also Microsoft from Path; skipping failed scheduled tasks
...
- added total execution time for debugging purposes
- bugfixes
- GetEverLoggedUsers() - skipping users which could not be translated
2021-01-18 22:12:01 +01:00
makikvues
e16234b773
- refactoring & cleanup
...
- TODO: first version of AppLocker implementation
- CredentialManager implementation
- added check of LsaCompatiblityLevel
- updated GetAutoRunsFolder
- updated PrintTranscriptPS
2021-01-17 23:38:39 +01:00
makikvues
448a1aaf5b
- fixed getting data from clipboard
...
- fixed GetExecutableFromPath
- unified exception logging
- cleanup
2021-01-14 23:50:19 +01:00
makikvues
bf10cd7c0c
- implemented quicker search with pre-caching search files/directories
2021-01-13 22:36:53 +01:00
makikvues
c8683a9a48
- added debug to usage
2021-01-10 20:40:01 +01:00
makikvues
ff030224fe
- reverted new test search method
...
- added debugging information - memory, method execution time
2021-01-10 20:37:49 +01:00
makikvues
2f467a3405
- huge refactoring
2021-01-10 14:46:34 +01:00
makikvues
19f6cda357
- refactoring / cleanup
...
- split files into multiple classes
- implemented native wifi - getting saved credentials
- added registry helper
2021-01-08 19:46:15 +01:00
makikvues
d091dbcba5
- updated Watson + cleanup
2021-01-08 14:40:01 +01:00
makikvues
358b366408
- updated ignore list
2021-01-08 13:55:38 +01:00
makikvues
365848d9a1
- work in progress
...
- added measurement method to measure search speed
- added new search implementation using Parallel.ForEach
2021-01-07 23:23:10 +01:00
Carlos Polop
16fd60d99a
Update MyUtils.cs
2020-11-26 21:18:02 +00:00
Limn0
d0696edd18
updated color scheme
...
-purple
+readability
2020-10-09 15:08:57 +02:00
Limn0
50e67cb174
Re-write of WinPEAS.bat
...
+ added color-coded output
+ added progress tracking in percent
+ segmented code into pass-through functions for easier maintenance
o reformatted advisory message
o removed some ECHO. to save uniform whitespace
o fixed some typos
o more error-catching
2020-10-09 12:39:45 +02:00
Limn0
62f7ea3a94
fix typo & fix issue with weird echo on error messages
2020-10-09 00:27:54 +02:00
Chris Weinert
822e149c72
Add WiFi credential functionality
2020-09-24 17:06:54 -05:00
Carlos Polop
157e22ce0e
Update Program.cs
2020-09-20 23:23:04 +01:00
carlospolop
89bc4c527e
winpeas
2020-09-02 09:54:37 +01:00
carlospolop
256b22d0dc
Winpeas changes
2020-08-18 14:32:36 +01:00
carlospolop
59627f8e35
Winpeasv1.1
2020-08-16 15:37:51 +01:00
Carlos Polop
47cd142ca8
Merge pull request #56 from kazkansouh/device-driver-enum
...
3rd party device drive enum
2020-08-16 13:35:20 +01:00