Michael Haag
87743faf73
+ Added a Discovery bat file to run all the things at once. Generally, none of this activity is deemed "evil" as it is recon activity. Seeing it all run at once should be suspect to anyone. + Updates to two discovery files.
27 lines
578 B
Batchfile
27 lines
578 B
Batchfile
net user Administrator /domain
|
|
net Accounts
|
|
net localgroup administrators
|
|
net use
|
|
net share
|
|
net group "domain admins" /domain
|
|
net config workstation
|
|
net accounts
|
|
net accounts /domain
|
|
net view
|
|
wmic useraccount list
|
|
wmic useraccount get /ALL
|
|
wmic startup list brief
|
|
wmic share list
|
|
wmic service get name,displayname,pathname,startmode
|
|
wmic process list brief
|
|
wmic process get caption,executablepath,commandline
|
|
wmic qfe get description,installedOn /format:csv
|
|
arp -a
|
|
"cmd.exe" /C whoami
|
|
ipconfig /displaydns
|
|
route print
|
|
netsh advfirewall show allprofiles
|
|
systeminfo
|
|
qwinsta
|
|
quser
|