Skip to content

Latest commit

 

History

History
49 lines (37 loc) · 1.38 KB

win-enum.md

File metadata and controls

49 lines (37 loc) · 1.38 KB

Enumerate System Info

  • systeminfo
  • whoami : get current user
  • whoami /priv : get current user privileges
  • wmic qfe get Caption,HotFixID,InstalledOn,Description : get installed updates
  • net localgroup <user> : get group membership of user
  • net user <user> : get user info

Enumerate Network Info

  • ipconfig /all
  • netstat -ano : lists info on tcp/udp ports
  • netsh advfirewall show allprofiles : shows f/w status
  • arp -a : display arp table
  • route print : print route table

Enum Processes & Services

  • net start : lists services running
  • net stop <servicename> : stop a service
  • wmic service list brief : same as above with extra details like pid
  • tasklist /svc : list process with respecive svc
  • schtasks /query /fo list /v : list scheduled tasks

Useful Meterpreter Commands

  • sysinfo
  • getuid
  • getprivs
  • show_mount
  • ipconfig

Useful Post Modules

  • post/windows/gather/win_privs
  • post/windows/gather/enum_logged_on_users
  • post/windows/gather/checkvm
  • post/windows/gather/enum_applications
  • post/windows/gather/enum_computers : enum computers on lan
  • post/windows/gather/enum_patches
  • post/windows/gather/enum_shares
  • post/windows/gather/enum_av_excluded : excluded av path

Scripts