Privilege Escalation Vulnerability Scan Tool

Privilege Escalation Vulnerability Scan Tool is a handy command-line program that helps keep your computer safe from online threats. It runs security checks on your workstation to find any weak spots related to user privileges. These vulnerabilities can pop up because of certain Windows features that can be turned on or off.

What Can This Tool Find?

This tool can detect four main types of vulnerabilities:

• Always Install Elevated


• Legacy SysPrep Configuration Files


• Unquoted Windows Service Paths


• Windows Service Registry Permissions

Understanding the Vulnerabilities

The Always Install Elevated feature is a Windows setting that allows applications or services to install with system-level privileges by default. If this option is left active, it opens the door for backdoors that could take control of your PC without you knowing.

The Sysprep (System Preparation Tool) is used by Windows to clear security and identification information when getting ready for a first-time boot or cloning the OS for multiple computers in the same network.

Unquoted Windows service paths happen when the full paths to these services aren't wrapped in quotes. For example, instead of "C:\Windows\Program Files\TrustedInstaller.exe", it might just say C:\Program Files\TrustedInstaller.exe. This can cause issues if there are spaces in the path, making them open to exploits.

The last type relates to Windows Service Registry Permissions. This keeps track of how local services are set up in a specific registry entry (HKLM\SYSTEM\CurrentControlSet\Services). If this info gets changed, it could lead to malware hijacking your services, so it's super important to configure it properly.

Running the Scan Tool

The Privilege Escalation Vulnerability Scan Tool goes through each of these vulnerability types and lets you know whether everything checks out or not. Just remember to run it as an admin so you don’t hit any permission issues!

A little heads-up: this tool doesn’t fix problems on its own, so you’ll need another application or some online research if you want to solve those issues. But don't worry! You can also scan other workstations on your local network by specifying their hostname like this: privesc.exe [hostname].

If you're looking for a solid way to check for vulnerabilities on your system, give this tool a try! You can download it here!