catch ACL access violation exception in Invoke-PrivescAudit

Author: AdrianVollmer

Privesc/PowerUp.ps1

@@ -895,38 +895,43 @@ a modifiable path.
 
             $CandidatePaths | Sort-Object -Unique | ForEach-Object {
                 $CandidatePath = $_
-                Get-Acl -Path $CandidatePath | Select-Object -ExpandProperty Access | Where-Object {($_.AccessControlType -match 'Allow')} | ForEach-Object {
+                try {
+                    Get-Acl -Path $CandidatePath | Select-Object -ExpandProperty Access | Where-Object {($_.AccessControlType -match 'Allow')} | ForEach-Object {
 
-                    $FileSystemRights = $_.FileSystemRights.value__
+                        $FileSystemRights = $_.FileSystemRights.value__
 
-                    $Permissions = $AccessMask.Keys | Where-Object { $FileSystemRights -band $_ } | ForEach-Object { $AccessMask[$_] }
+                        $Permissions = $AccessMask.Keys | Where-Object { $FileSystemRights -band $_ } | ForEach-Object { $AccessMask[$_] }
 
-                    # the set of permission types that allow for modification
-                    $Comparison = Compare-Object -ReferenceObject $Permissions -DifferenceObject @('GenericWrite', 'GenericAll', 'MaximumAllowed', 'WriteOwner', 'WriteDAC', 'WriteData/AddFile', 'AppendData/AddSubdirectory') -IncludeEqual -ExcludeDifferent
+                        # the set of permission types that allow for modification
+                        $Comparison = Compare-Object -ReferenceObject $Permissions -DifferenceObject @('GenericWrite', 'GenericAll', 'MaximumAllowed', 'WriteOwner', 'WriteDAC', 'WriteData/AddFile', 'AppendData/AddSubdirectory') -IncludeEqual -ExcludeDifferent
 
-                    if ($Comparison) {
-                        if ($_.IdentityReference -notmatch '^S-1-5.*') {
-                            if (-not ($TranslatedIdentityReferences[$_.IdentityReference])) {
-                                # translate the IdentityReference if it's a username and not a SID
-                                $IdentityUser = New-Object System.Security.Principal.NTAccount($_.IdentityReference)
-                                $TranslatedIdentityReferences[$_.IdentityReference] = $IdentityUser.Translate([System.Security.Principal.SecurityIdentifier]) | Select-Object -ExpandProperty Value
+                        if ($Comparison) {
+                            if ($_.IdentityReference -notmatch '^S-1-5.*') {
+                                if (-not ($TranslatedIdentityReferences[$_.IdentityReference])) {
+                                    # translate the IdentityReference if it's a username and not a SID
+                                    $IdentityUser = New-Object System.Security.Principal.NTAccount($_.IdentityReference)
+                                    $TranslatedIdentityReferences[$_.IdentityReference] = $IdentityUser.Translate([System.Security.Principal.SecurityIdentifier]) | Select-Object -ExpandProperty Value
+                                }
+                                $IdentitySID = $TranslatedIdentityReferences[$_.IdentityReference]
+                            }
+                            else {
+                                $IdentitySID = $_.IdentityReference
                             }
-                            $IdentitySID = $TranslatedIdentityReferences[$_.IdentityReference]
-                        }
-                        else {
-                            $IdentitySID = $_.IdentityReference
-                        }
 
-                        if ($CurrentUserSids -contains $IdentitySID) {
-                            $Out = New-Object PSObject
-                            $Out | Add-Member Noteproperty 'ModifiablePath' $CandidatePath
-                            $Out | Add-Member Noteproperty 'IdentityReference' $_.IdentityReference
-                            $Out | Add-Member Noteproperty 'Permissions' $Permissions
-                            $Out.PSObject.TypeNames.Insert(0, 'PowerUp.ModifiablePath')
-                            $Out
+                            if ($CurrentUserSids -contains $IdentitySID) {
+                                $Out = New-Object PSObject
+                                $Out | Add-Member Noteproperty 'ModifiablePath' $CandidatePath
+                                $Out | Add-Member Noteproperty 'IdentityReference' $_.IdentityReference
+                                $Out | Add-Member Noteproperty 'Permissions' $Permissions
+                                $Out.PSObject.TypeNames.Insert(0, 'PowerUp.ModifiablePath')
+                                $Out
+                            }
                         }
                     }
                 }
+                catch {
+                    Write-Warning $_
+                }
             }
         }
     }