Alpha Windows Privilege Escalation Suite 2.0 is not detected malicious by Windows Defender or any other AV.
-
Retrieving System Information: Alpha-wpes gathers various system information such as the operating system, hostname, username, CPU, memory, disk information, network interfaces, network connections, installed software, running processes, Active Directory domain information, and more.
-
Checking File and Directory Permissions:It checks the permissions of critical files and directories to identify any improper or weak permissions that could pose security risks.
-
Checking Registry Key Permissions: Alpha-wpes examines the permissions of important registry keys to identify any weak or insecure permissions that may need attention.
-
Finding Password Files: The tool checks for the existence of password files in specific locations on the system.
-
Checking Firewall Configuration: It retrieves and displays the configuration of the Windows firewall.
-
Identifying Improper Permission Directories: Alpha-wpes identifies directories within specified target directories that have improper permissions set.
-
Identifying Weak ACL Files: It identifies files within specified target directories that have weak or misconfigured ACLs (Access Control Lists).
-
Enumerating Weak Registry Keys: The tool identifies registry keys with weak or insecure permissions.
-
Identifying Modifiable Registry Keys:It identifies registry keys that can be modified by the current user, which could be a potential security risk.
-
Retrieving Scheduled Tasks: Alpha-wpes retrieves a list of scheduled tasks on the system, including information such as task name, next run time, status, author, and executable.
-
Checking for Saved Passwords: This tool searches for saved passwords in the Windows Credential Manager.
-
Finding Secrets in Configuration Files:It looks for passwords and other secrets stored in specific configuration files.
-
Checking for Misconfigurations: Alpha-wpes checks for common misconfigurations that can lead to privilege escalation, such as weak file and service permissions or unquoted service paths.
The tool provides valuable insights into the system's security posture and help identify potential vulnerabilities or misconfigurations that may need to be addressed for privilege escalation.
No need to clone just download the Binary from Releases and run awpes.exe in CMD.
. BTC: bc1qykzfyjdkyck5v4sd46j4y8ra6mgltvu6zqu69s
. XMR: 49RNZHq5kZJDJUK6RmnnxdhHwC7RNDTRM6VLj5ivsWiXGFXxdWFVJcHicrbY1TL4rn3fVhHGMNke4LmkJFVCsFuSEdcW47E
This project is only for educational purposes. I am not responsible for any misuse!
Developed by @smridh