{"id":15374431,"url":"https://github.com/ivan-sincek/unquoted-service-paths","last_synced_at":"2025-08-03T05:30:52.067Z","repository":{"id":107019578,"uuid":"256906360","full_name":"ivan-sincek/unquoted-service-paths","owner":"ivan-sincek","description":"List unquoted service paths and start, stop, or restart services as needed.","archived":false,"fork":false,"pushed_at":"2021-07-14T18:02:27.000Z","size":16,"stargazers_count":4,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"master","last_synced_at":"2024-10-17T16:21:18.142Z","etag":null,"topics":["bug-bounty","ethical-hacking","offensive-security","penetration-testing","powershell","red-team-engagement","restart","security","unquoted-services","windows","windows-penetration-testing"],"latest_commit_sha":null,"homepage":"","language":"PowerShell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ivan-sincek.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-04-19T03:35:05.000Z","updated_at":"2024-08-12T20:00:25.000Z","dependencies_parsed_at":null,"dependency_job_id":"ffc93b7d-79cf-49d9-8f87-dbde629a5899","html_url":"https://github.com/ivan-sincek/unquoted-service-paths","commit_stats":{"total_commits":1,"total_committers":1,"mean_commits":1.0,"dds":0.0,"last_synced_commit":"cad60998394a718130ff00b90afd1a89fd3774a5"},"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ivan-sincek%2Funquoted-service-paths","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ivan-sincek%2Funquoted-service-paths/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ivan-sincek%2Funquoted-service-paths/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ivan-sincek%2Funquoted-service-paths/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ivan-sincek","download_url":"https://codeload.github.com/ivan-sincek/unquoted-service-paths/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":228526743,"owners_count":17933291,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bug-bounty","ethical-hacking","offensive-security","penetration-testing","powershell","red-team-engagement","restart","security","unquoted-services","windows","windows-penetration-testing"],"created_at":"2024-10-01T13:58:46.721Z","updated_at":"2024-12-06T21:21:17.319Z","avatar_url":"https://github.com/ivan-sincek.png","language":"PowerShell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Unquoted Service Paths\n\nList unquoted service paths and start, stop, or restart services as needed.\n\nSome services require administrative privileges.\n\nTested with PowerShell v5.1.18362.752 on Windows 10 Enterprise OS (64-bit).\n\nMade for educational purposes. I hope it will help!\n\n## How to Run\n\nOpen the PowerShell from [\\\\src\\\\](https://github.com/ivan-sincek/unquoted-service-paths/tree/master/src) and run the commands shown below.\n\nSet the execution policy:\n\n```pwsh\nSet-ExecutionPolicy Unrestricted\n```\n\nRun the script:\n\n```pwsh\n.\\unquoted_service_paths.ps1\n```\n\nOr, run the following command from either PowerShell or Command Prompt:\n\n```pwsh\nPowerShell -ExecutionPolicy Unrestricted -File .\\unquoted_service_paths.ps1\n```\n\nTo run the PowerShell encoded command, run the following command from either PowerShell or Command Prompt ([minified script](https://github.com/ivan-sincek/unquoted-service-paths/blob/master/src/unquoted_service_paths_mini.ps1)):\n\n```pwsh\nPowerShell -ExecutionPolicy Unrestricted -EncodedCommand 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\n```\n\nTo generate a PowerShell encoded command from a PowerShell script, run the following PowerShell command:\n\n```pwsh\n[Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes([IO.File]::ReadAllText($script)))\n```\n\nTo decode a PowerShell encoded command, run the following PowerShell command:\n\n```pwsh\n[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($command))\n```\n\n## Images\n\n\u003cp align=\"center\"\u003e\u003cimg src=\"https://github.com/ivan-sincek/unquoted-service-paths/blob/master/img/unquoted_service_paths.png\" alt=\"Unquoted Service Paths\"\u003e\u003c/p\u003e\n\n\u003cp align=\"center\"\u003eFigure 1 - Unquoted Service Paths\u003c/p\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fivan-sincek%2Funquoted-service-paths","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fivan-sincek%2Funquoted-service-paths","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fivan-sincek%2Funquoted-service-paths/lists"}