search

peass-ng / PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
https://book.hacktricks.xyz
Other
15.34k stars 3k forks source link

[WinPEAS.ps1] - Process is terminated due to StackOverflowException #402

Open init5-SF opened 7 months ago

init5-SF commented 7 months ago

If you are going to suggest something, please remove the following template. If your issue is related with WinPEAS.ps1 please mention https://github.com/RandolphConley

Mentioning @RandolphConley

Issue description

I ran WinPEAS.ps1 with a low privileged user just to see the output, it took some time then crashed the powershell process with the error message: Process is terminated due to StackOverflowException

Steps to reproduce the issue

  1. open powershell with a low level user
  2. run WinPEAS.ps1 without any parameters

Which parameters did you use for executing the script and how did you execute it?

None

If winpeas, did you use a clean or obfuscated winpeas, and for which architecture?

N/W

Is there any AV / Threat protection in the system?

Yes, Defender AV. I tried again with Defender disabled and the issue did not happen again.

Please, indicate the OS, the OS version, and the kernel version (build number in case of Windows)

Windows 11 (23H2) 64bit

Please, indicate the check that is failing and add a screenshot showing the problem

image

How did you expect it to work?

Additional details / screenshot