privesccheck

We have hosted the application privesccheck in order to run this application in our online workstations with Wine or directly.

Quick description about privesccheck:

PrivescCheck is a PowerShell script for Windows that automates enumeration of potential Local Privilege Escalation (LPE) vulnerabilities arising from misconfigurations, insecure settings, unclear permissions, or bad practices. It can run “basic” checks, extended ones, produce reports in various formats (TXT, HTML, CSV, XML), and helps both penetration testers and system administrators find weak points or audit systems.

Features:

• Detects misconfigurations and potential privilege escalation vectors due to Windows configuration or bad practices
• Supports different “modes” of scanning: basic vs extended vs audit; ability to generate human-readable plus machine readable report formats
• Standalone script (single .ps1 file) so can be copied and run without cloning entire repo
• Ability to run dot-sourced so that functions/cmdlets are available in current session; supports bypassing execution policy etcetera
• Reports in multiple formats: e.g. TXT and HTML; optionally CSV, XML etcetera for parsing and audit automation
• Useful even when not running as administrator; some checks still possible under limited privileges; reports risk etcetera with gradation

Programming Language: PowerShell.
Categories: