Windows Discovery
Windows Discovery maps privilege escalation vectors on compromised Windows hosts through systematic enumeration of system configuration, user context, services, and misconfigurations. It gathers baseline OS details, token privileges, and group memberships to identify immediate escalation paths, then reports findings to the orchestrator without crossing into exploitation.
Windows Discovery enumerates Windows systems for local privilege escalation vectors and attack surface mapping.
AI-generated summary based on this skill's SKILL.md
Install
blacklanternsecurity/red-run/windows-discovery · repository language: Python
git clone https://github.com/blacklanternsecurity/red-run
cp -r red-run ~/.claude/skills/windows-discoverygenerated, unverified - the skill's exact subdirectory could not be determined; check the repository on GitHub
npx skillfed install blacklanternsecurity/red-run/windows-discoveryFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What does Windows Discovery do?
Windows Discovery maps privilege escalation vectors on compromised Windows hosts through systematic enumeration of system configuration, user context, services, and misconfigurations. It gathers baseline OS details, token privileges, and group memberships to identify immediate escalation paths, then reports findings to the orchestrator without crossing into exploitation.
Can Windows Discovery enumerate windows hosts on a network?
Yes. Windows Discovery is designed to discover and enumerate Windows hosts on a network as a primary function. It identifies active Windows systems and collects detailed configuration data to support security assessment and infrastructure mapping workflows.
How does Windows Discovery identify active Windows systems?
Windows Discovery identifies active Windows systems for security assessment by enumerating system configuration, user context, services, and misconfigurations. It gathers OS details and token privileges to detect which systems are present and active on the network.
What license does Windows Discovery use?
Windows Discovery is released under the GPL-3.0 license, which permits use, modification, and distribution under the terms of the GNU General Public License version 3.
Does Windows Discovery map Windows infrastructure?
Yes. Windows Discovery maps Windows infrastructure and assets by systematically enumerating hosts, their configurations, user contexts, and group memberships. This enables comprehensive asset discovery and infrastructure visibility for security and operational purposes.
What information does Windows Discovery collect?
Windows Discovery collects baseline OS details, token privileges, group memberships, system configuration data, user context information, services, and misconfigurations. It reports these findings to identify privilege escalation vectors and security assessment opportunities.