PrivescCheck/CHANGELOG at master · Doug-Lyons/PrivescCheck · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
2020-10-29
    - Refactored the report generation feature
    - Refacted scheduled tasks check
    - Added Scheduled Tasks > Invoke-ScheduledTasksUnquotedPathCheck

2020-10-28
    - Added an 'RunIfAdmin' mode. Some checks are now run even if the script is executed as an administrator.
    - Added severity level to each check

2020-10-27
    - Added Config > Invoke-SccmCacheFolderVulnCheck

2020-10-07
    - Additional custom checks can now be added as plugins
    - Added a "silent" mode (only the final vulnerability report is displayed)
    - Added Config > Invoke-SccmCacheFolderCheck
    - Added some report generation functions (HTML, CSV)

2020-10-06
    - Added Apps > Invoke-ApplicationsOnStartupVulnCheck

2020-10-04
    - Added Credentials > PowerShell History

2020-09-13
    - Added basic vulnerability report

2020-09-04
    - Added Misc > Invoke-EndpointProtectionCheck

2020-07-22
    - Fixed a false positive: 'C:' resolves to the current directory
    - Fixed a false positive: scheduled tasks running as the current user
    - Added Hardening > Invoke-BitlockerCheck

2020-07-17
    - Refactored Main function

2020-07-16
    - Added Helper > Convert-SidToName
    - Added Misc > Invoke-HotfixCheck
    - Added Applications > Invoke-ProgramDataCheck

2020-04-09
    - Added DLL Hijacking > Invoke-HijackableDllsCheck
    - Added Applications > Invoke-ScheduledTasksCheck

2020-04-08
    - Added Misc > Invoke-UsersHomeFolderCheck
    - Added Programs > Invoke-ApplicationsOnStartupCheck
    - Added Registry > Invoke-WsusConfigCheck
    - Added User > Invoke-UserEnvCheck
    - Updated Credentials > Invoke-CredentialFilesCheck

2020-03-21
    - Handled exception in "Network > Invoke-WlanProfilesCheck" when dealing with servers

2020-03-12
    - Added Network > Invoke-WlanProfilesCheck

2020-02-14
    - Added Credentials > Invoke-VaultListCheck
    - Renamed Credentials > Invoke-CredentialManagerCheck -> Invoke-VaultCredCheck

2020-02-09
    - Added Credentials > Invoke-GPPPasswordCheck

2020-01-30
    - Added Credentials > Invoke-CredentialManagerCheck

2020-01-29
    - Fixed bug Helper > Get-ModifiablePath (error handling in Split-Path)

2020-01-20
    - Fixed bug User > Invoke-UserGroupsCheck (don't translate SIDs like "S-1-5.*")

2020-01-17
    - Added Helper > Get-UEFIStatus
    - Added Helper > Get-SecureBootStatus
    - Added Helper > Get-CredentialGuardStatus
    - Added Helper > Get-LsaRunAsPPLStatus
    - Added Registry > Invoke-LsaProtectionsCheck
    - Added Helper > Get-UnattendSensitiveData
    - Added Credentials > Invoke-UnattendFilesCheck
    - Merged Sensitive Files with Credentials

2020-01-16
    - Moved "Invoke-PrivescCheck.ps1" from "Pentest-Tools" to a dedicated repo.
    - Added User > Invoke-UserCheck
    - Added User > Invoke-UserGroupsCheck
    - Added User > Invoke-UserPrivilegesCheck
    - Added Services > Invoke-InstalledServicesCheck
    - Added Services > Invoke-ServicesPermissionsCheck
    - Added Services > Invoke-ServicesPermissionsRegistryCheck
    - Added Services > Invoke-ServicesImagePermissionsCheck
    - Added Services > Invoke-ServicesUnquotedPathCheck
    - Added Dll Hijacking > Invoke-DllHijackingCheck
    - Added Sensitive Files > Invoke-SamBackupFilesCheck
    - Added Programs > Invoke-InstalledProgramsCheck
    - Added Programs > Invoke-ModifiableProgramsCheck
    - Added Programs > Invoke-RunningProcessCheck
    - Added Credentials > Invoke-WinlogonCheck
    - Added Credentials > Invoke-CredentialFilesCheck
    - Added Registry > Invoke-UacCheck
    - Added Registry > Invoke-LapsCheck
    - Added Registry > Invoke-PowershellTranscriptionCheck
    - Added Registry > Invoke-RegistryAlwaysInstallElevatedCheck
    - Added Network > Invoke-TcpEndpointsCheck
    - Added Network > Invoke-UdpEndpointsCheck
    - Added Misc > Invoke-WindowsUpdateCheck
    - Added Misc > Invoke-SystemInfoCheck
    - Added Misc > Invoke-LocalAdminGroupCheck
    - Added Misc > Invoke-MachineRoleCheck
    - Added Misc > Invoke-SystemStartupHistoryCheck
    - Added Misc > Invoke-SystemStartupCheck
    - Added Misc > Invoke-SystemDrivesCheck