13.06.2016

Windows LPE check tool

Тулза позволяет произвести аудит системы Windows, на предмет возможности локального повышения привилегий в системе.


Windows-privesc-check is standalone executable that runs on Windows systems. It tries to find misconfigurations that could allow local unprivileged users to escalate privileges to other users or to access local apps (e.g. databases).
It is written in python and converted to an executable using pyinstaller so it can be easily uploaded and run (as opposed to unzipping python + other dependencies). It can run either as a normal user or as Administrator (obviously it does a better job when running as Administrator because it can read more files). 

C:\>windows-privesc-check2.exe --audit -a -o wpc-report

QuickStartUsage: