PrivescCheck
Seatbelt
| PrivescCheck | Seatbelt | |
|---|---|---|
| 4 | 8 | |
| 2,630 | 3,502 | |
| - | 1.7% | |
| 8.4 | 6.1 | |
| 2 months ago | about 2 months ago | |
| PowerShell | C# | |
| BSD 3-clause "New" or "Revised" License | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
PrivescCheck
- Windows scheduled task PE
-
Passed with 90 points (incl report)
You're welcome. This is it https://github.com/itm4n/PrivescCheck
-
Failed again, 2nd attempt..sadpanda
Run https://github.com/itm4n/PrivescCheck => Also dumps cleartext passwords if any are saved, great to run crackmapexec if no hash is available
- I passed with 100 points on second attempt AMA
Seatbelt
-
Allowed tools for OSCP
I'm taking my OSCP exam next Wednesday and was just wondering on what tools are actually prohibited and which are not. I'm specifically referring to linpeas, winpeas, seatbelt. I often times run these tools when I've exausted my enumeration methods for a quick find. Are these tools allowed on the AD set and the individual machines?
-
Cannot Load .NET assemblies in memory!
However, whenever I tried to run Seatbelt or similar software, it keeps failing at Load_3() with the error code 0x8007000b.
-
What are the alternative tools for wmic on cmd?
I'd recommend poking around at github and see what you find. A good starting point is WinPEAS if you're looking for automation. Seatbelt might also be helpful
-
Hardening Best Practices: Materials for Windows 10/11
Seatbelt: https://github.com/GhostPack/Seatbelt
- I passed with 100 points on second attempt AMA
- AzureDevOps + Github Question
- GhostPack/Seatbelt - Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
What are some alternatives?
OSCP-Priv-Esc - Mind maps / flow charts to help with privilege escalation on the OSCP.
PEASS-ng - PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
PrintSpoofer - Abusing impersonation privileges through the "Printer Bug"
Windows11_Hardening - a collection about Windows 11
pspy - Monitor linux processes without root permissions
Ryujinx - Experimental Nintendo Switch Emulator written in C#
OSCP-Exercise-Checklist - A checklist to help students track their OSCP exercise progress.
exec-assembly - Execute .NET assemblies in Memory!
TJ-JPT - This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Joplin
Priv2Admin - Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.