Skip to content

Feat: added additional windows enum features#157

Merged
r-a303931 merged 7 commits intomainfrom
feat/windows-enum
Mar 23, 2026
Merged

Feat: added additional windows enum features#157
r-a303931 merged 7 commits intomainfrom
feat/windows-enum

Conversation

@BenPPetersons
Copy link
Contributor

Added windows enumeration features. At the moment, this code should be able to:

  1. List ports and associated PIDs, as well as the hostname (same as before)
  2. List if the "wsl" or "docker" binary is in the user's PATH.
  3. List out the directories of where IIS Sites are being served from
  4. List out potential shells that are in those IIS directories
  5. List out potential python web servers and other web servers
  6. List startup items in startup (items that are not signed by microsoft)
  7. List suspicious files in system32 (-d option lists out dll's and .ps1's on top of the .exe's).
image

@r-a303931
Copy link
Contributor

Also, please go to the development side on the right and mark all the issues that this closes

added enum for finding startup processes, websites, shells in websites, and sus stuff in System32
changed the subcommand structure to allow users to specify specific enums if wanted, and fixed a system32 enum issue with the -d flag where it wouldn't accept it with the subcommand
…or actual shells in the files instead of just basing it off the file name
… functionality with startup checker as well.
@r-a303931 r-a303931 merged commit c70d10c into main Mar 23, 2026
1 check passed
@r-a303931 r-a303931 deleted the feat/windows-enum branch March 23, 2026 04:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

JJ-Enum: System32/DLL Check JJ-Enum: Defender Check JJ-Enum: IIS Enum JJ-enum: autoruns

2 participants