PrivescCheck

PrivescCheck is a PowerShell script that enumerates Windows security misconfigurations relevant to local privilege escalation and can emit TXT, HTML, CSV, or XML reports. It supports base, extended, audit, experimental, and risky check sets. Access-control checks run in the current user's context; when run as administrator, many vulnerability checks are skipped. It reports candidate conditions for investigation and does not itself exploit them.