Seatbelt
Security survey of a Windows host: credentials, tokens, juicy configurations.
A Windows host survey tool (C#, from GhostPack). It gathers dozens of local security checks at once: stored credentials, PowerShell history, tokens, scheduled tasks, AutoLogon, firewall rules, installed software... It's what you run the moment you land on a host to guide escalation, the Windows equivalent of linpeas.
Family Privilege escalation
Flags -group=all / -group=user
Concepts AutoLogon credentials, Credential leak in PowerShell history
Cheatsheet Enumeration
Installation
# C#/.NET: compilar o binario precompilado de GhostPackUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.