Skip to content

sysvol-enum v1.3.0

Choose a tag to compare

View all tags
@FlakoJohnson FlakoJohnson released this 07 May 06:21
v1.3.0
2b01a28

Add Registry.xml (GPP) parser

Thorough coverage of Group Policy Preferences registry entries across all severity levels:

CRITICAL: credential-named value names, AutoAdminLogon, DefaultPassword, WDigest UseLogonCredential=1, AlwaysInstallElevated
HIGH: LSA protection off, NTLMv1, LM hashes, RestrictedAdmin disabled, UAC off/suppressed, LocalAccountTokenFilterPolicy=1, Defender disabled (5 settings), WinRM cleartext/Basic auth, SMB signing not required, firewall off, null session access, RDP saved passwords
MEDIUM: RDP enabled, PowerShell Bypass/Unrestricted, SMB signing disabled, RDP password saving
INFO: Run key entries, credential cache count, PowerShell RemoteSigned

Assets 3
Loading