pentestmonkey/windows-privesc-check
Windows Privesc Check
Windows-privesc-check is an automated security auditing tool designed to identify misconfigurations and vulnerabilities that may allow for unauthorized privilege escalation on Windows systems. It functions by scanning local system configurations, including file system permissions, registry settings, and service configurations, to detect security weaknesses that could lead to elevated administrative access.
The tool distinguishes itself by providing both local auditing and remote assessment capabilities. It can query remote Windows hosts to enumerate network shares, user accounts, and domain trust relationships, allowing for the identification of potential attack vectors across a network. Furthermore, it supports automated security compliance reporting by generating structured, standardized reports that document the security posture of systems over time.
Beyond its core scanning functions, the utility extracts raw security metadata, such as user group memberships and detailed configuration settings, to facilitate manual review or external analysis. The software is distributed as a standalone executable, ensuring it can be deployed and executed without requiring external dependencies or pre-installed runtime environments.
Features
- Windows Privilege Escalation Suites - Scans local Windows configurations to identify misconfigurations and vulnerabilities that could allow unauthorized privilege escalation.
- Local Security Auditing - Evaluates the security posture of a local machine to identify misconfigurations and potential privilege escalation risks.
- Configuration Audits - Performs automated checks of system files, registry keys, and service permissions to identify security misconfigurations.
- System Configuration Auditing - Analyzes system files and registry settings to identify insecure configurations that could lead to privilege escalation.
- Windows Vulnerability Assessments - Automates the discovery of security risks and vulnerabilities across local and remote Windows systems to support compliance and hardening.
- Security Metadata Exporters - Extracts raw security metadata like user group memberships and share permissions to create historical snapshots.
- Audit Report Generators - Generates comprehensive security assessment reports in multiple formats to document findings.
- Share Enumeration - Discovers and lists available network shares and their paths on a remote system for security assessment.
- Security Assessment Tools - Queries remote Windows hosts to enumerate network shares, user accounts, and domain trust relationships.
- Local File Permission Modifiers - Provides utilities for inspecting and modifying local file system permissions to identify security misconfigurations.
- Windows API Enumerators - Queries native system interfaces to extract security descriptors, user group memberships, and service configurations.
- Remote Security Audits - Identifies potential vulnerabilities on remote systems by listing share configurations and administrative user accounts.
- Security Auditing Tools - Collects and reports on system settings, user group memberships, and service permissions to assess the security posture of Windows hosts.
- Security Configurations - Collects detailed information about securable objects and security settings into readable formats for manual review.
- Windows Security Hardening - Identifies and analyzes Windows system configurations, registry settings, and security policies to support hardening and access control reviews.
- Compliance Reporting - Generates structured reports from system configuration data to document security posture for compliance purposes.
- Registry Security Scanners - Scans the system registry to identify insecure permissions on services, startup items, and sensitive configuration keys.
- Post Exploitation - Script for identifying Windows privilege escalation vectors.
