itm4n/PrivescCheck
PrivescCheck
PrivescCheck is a PowerShell-based security auditing tool designed to scan Windows configurations for potential privilege escalation paths and local host vulnerabilities. It functions as a vulnerability assessment utility that analyzes system settings and registry configurations to identify weaknesses that could allow unauthorized administrative access.
The tool automates internal security reconnaissance and post-exploitation data collection to gather environmental information. It serves as a security compliance reporter by exporting scan results into structured formats, including HTML, CSV, and XML.
The project covers system configuration auditing and the identification of permission flaws. It utilizes Windows Management Instrumentation and native operating system interfaces to evaluate the hardening status of a host.
Features
- PowerShell - Leverages PowerShell as the primary framework for automating complex system security audits and configuration checks.
- Windows System Integrations - Integrates with native Windows platform features and registry keys to query system settings and object permissions.
- Local Security Auditing - Evaluates local host settings and system configurations to verify security hardening and identify non-compliant parameters.
- Post-Exploitation Frameworks - Gathers detailed environmental information from compromised systems to assist with post-exploitation analysis.
- Privilege Escalation Analysis - Analyzes Windows system configurations and permissions to identify potential paths for unauthorized privilege escalation.
- Privilege Escalation Path Analysis - Identifies chains of configuration weaknesses and vulnerabilities that lead to unauthorized root or administrative access.
- PowerShell-Based Audit Tools - Functions as a script-based utility for diagnosing system weaknesses and evaluating Windows hardening status.
- Security Reconnaissance Tools - Automates the collection of system and environmental information during the initial phase of a security assessment.
- Privilege Escalation Scanning - Scans Windows configurations to identify specific weaknesses and vulnerabilities that allow for administrative privilege escalation.
- System Configuration Auditing - Analyzes system settings and kernel parameters against security criteria to identify insecure configurations.
- Windows Vulnerability Assessments - Performs security audits targeting Windows host configurations and registry settings to find local vulnerabilities.
- WMI Data Acquisition - Uses Windows Management Instrumentation to retrieve hardware and software configuration data from the host environment.
- Multi-Format Serializers - Provides utilities to export security scan results into multiple standard formats including HTML, CSV, and XML.
- Security Report Generation - Exports security scan findings into structured documentation formats such as HTML, CSV, and XML.
- Vulnerability Report Generation - Generates detailed vulnerability reports in structured formats like HTML and CSV from security scan results.
- Post Exploitation - Tool for automated Windows privilege escalation checks.
- Privilege Escalation - Enumerates Windows privilege escalation vectors.
- Privilege Escalation Tools - Tool for checking Windows privilege escalation vectors.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
