Added checks for Windows Update Server over HTTP

SharpUp/Checks/WSUSOverHTTP.cs

@@ -0,0 +1,30 @@
+using SharpUp.Classes;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using static SharpUp.Utilities.RegistryUtils;
+
+namespace SharpUp.Checks
+{
+    public class WSUSOverHTTP : VulnerabilityCheck
+    {
+        private static string _regPath = "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate";
+        private static string _regName = "WUServer";
+        private static string _regPathEnabled = "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU";
+        private static string _regNameEnabled = "UseWUServer";
+
+        public WSUSOverHTTP()
+        {
+            _name = "WSUS updates over HTTP";
+            string WSUSOverHTTPHKLM = GetRegValue("HKLM", _regPath, _regName);
+            string WSUSEnabledHKLM = GetRegValue("HKLM", _regPathEnabled, _regNameEnabled);
+
+            if (WSUSOverHTTPHKLM.ToLower().StartsWith("http://") & (WSUSEnabledHKLM == "1"))
+            {
+                _details.Add($"WUServer: {WSUSOverHTTPHKLM}");
+                _isVulnerable = true;
+            }
+        }
+    }
+}

SharpUp/SharpUp.csproj

@@ -59,6 +59,7 @@
     <Compile Include="Checks\TokenPrivileges.cs" />
     <Compile Include="Checks\UnattendedInstallFiles.cs" />
     <Compile Include="Checks\UnquotedServicePath.cs" />
+    <Compile Include="Checks\WSUSOverHTTP.cs" />
     <Compile Include="Classes\VulnerabilityCheck.cs" />
     <Compile Include="Interfaces\IVulnerabilityCheck.cs" />
     <Compile Include="Native\Win32.cs" />