Windows system info and escalation paths:
- Environment
- VM detection
- Users
- Privileges
- AlwaysInstallElevated
- https://github.com/gtworek/Priv2Admin
- Antivirus
- Unattended files
- Vulnerable applications
- DLL hijacking
- Passwords in PowerShell history
Output is standard Markdown:
# WINGERPRINT
## Environment
- VM detected (QUEMU ARM Virtual Machine)
## Users
- Username: Username
Privilege level: Administrator
Password age: 1h1m1s
Last logon: 2020-01-01 01:01:01 +0000 CEST
Logon count: 1
Flags: [!] Password not required | Password never expires
## Privileges
- [!] AlwaysInstallElevated
## Antiviruses
- Microsoft Defender
- msmpeng.exe (PID 1111)
## Unattended files
- c:\windows\panther\unattend.xml- Install Go
go build
To be less detectable by antiviruses, instead of go build:
go install mvdan.cc/garble@latestgarble -literals -seed random -tiny build