🛠️ WinPEAS

Installation

# Prebuilt binaries: https://github.com/peass-ng/PEASS-ng/releases
# winPEASany.exe runs on any .NET version without extra dependencies

Common Commands

CommandDescription
winPEASany.exeFull scan — system info, privileges, services, scheduled tasks, registry secrets (autologon, etc.), installed software, more.
winPEASany.exe quiet cmdQuieter output restricted to Windows-specific checks (skip the generic/verbose sections).
winPEASany.exe log=out.txtWrite output to a file as well as the console (useful over a slow/laggy shell).

Tips & Tricks

  • Output is colour-coded by how interesting a finding is (red/yellow = worth investigating first) — skim for those colours before reading top-to-bottom on a long scan.
  • Regularly surfaces autologon credentials left in the registry (see HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon) and cleartext passwords sitting in unattended-install files, scheduled task definitions, or PowerShell history — check the “Windows Creds” section specifically rather than reading everything sequentially on a large AD box.
FileCreated
HTB - SaunaTuesday, July 21st 2026, 4:41:17 am

References: PEASS-ng GitHub