peass-ng / PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
https://book.hacktricks.xyz
Other
15.34k stars 3k forks source link

Support for Windows LAPS #423

Open darses opened 2 months ago

darses commented 2 months ago

This is a feature request to detect the (newer) Windows LAPS in addition to the current (legacy) Microsoft LAPS. I have only checked winPEAS.bat, but this feature request may also be relevant to winPEAS.ps1 and winPEAS.exe.

The LAPSInstallCheck in winPEAS.bat checks the (legacy) Microsoft LAPS status looking at the registry value(s) at HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd. The newer Microsoft LAPS variant uses a different registry value at HKLM\Software\Microsoft\Policies\LAPS, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\LAPS and HKLM\Software\Microsoft\Windows\CurrentVersion\LAPS\Config. See also the documentation at Supported policy roots.