infosecn1nja
/
PoshC2_Python
mirror of https://github.com/infosecn1nja/PoshC2_Python.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updated get-userinfo

chunking
benpturner 2019-01-07 14:28:15 +00:00
parent 6e6a2eaa5e
commit 45032107b7
1 changed files with 46 additions and 41 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

87
Modules/Get-UserInfo.ps1
View File

@ -1,43 +1,48 @@
function Get-UserInfo
{
Get-WmiObject win32_operatingsystem | select csname, @{LABEL='LastBootUpTime';EXPRESSION={$_.ConverttoDateTime($_.lastbootuptime)}}
$arr = @()
$Users = Get-WmiObject -Query "Select * from Win32_UserAccount Where LocalAccount = True"
echo ""
echo "======================"
echo "Local Users"
echo "======================"
$Users.Name
$GroupNames = Get-WmiObject -Query "SELECT * FROM Win32_Group Where LocalAccount = True"
echo ""
echo "======================"
echo "Local Groups"
echo "======================"
$GroupNames.Name
function Get-UserInfo
{
Get-WmiObject win32_operatingsystem | select csname, @{LABEL='LastBootUpTime';EXPRESSION={$_.ConverttoDateTime($_.lastbootuptime)}}
$arr = @()
$Users = Get-WmiObject -Query "Select * from Win32_UserAccount Where LocalAccount = True"
echo ""
echo "======================"
echo "Local Users"
echo "======================"
foreach ($usr in $Users) {
$usr.Name
}
$GroupNames = Get-WmiObject -Query "SELECT * FROM Win32_Group Where LocalAccount = True"
echo ""
echo "======================"
echo "Local Groups"
echo "======================"
foreach ($grp in $GroupNames) {
$grp.Name
}
$hostname = (Get-WmiObject -Class Win32_ComputerSystem).Name
echo ""
echo "======================"
echo "Members of Local Groups"
echo "======================"
foreach ($Group in $GroupNames) {
$GroupName = $Group.Name
$wmi = Get-WmiObject -Query "SELECT * FROM Win32_GroupUser WHERE GroupComponent=`"Win32_Group.Domain='$Hostname',Name='$GroupName'`""
if ($wmi -ne $null)
{
foreach ($item in $wmi)
{
$data = $item.PartComponent -split "\,"
$domain = ($data[0] -split "=")[1]
$name = ($data[1] -split "=")[1]
$arr += ("$domain\$name").Replace("""","")
[Array]::Sort($arr)
}
}
echo ""
echo $GroupName
echo "======================"
echo $arr
}
$hostname = (Get-WmiObject -Class Win32_ComputerSystem).Name
echo ""
echo "======================"
echo "Members of Local Groups"
echo "======================"
foreach ($Group in $GroupNames) {
$GroupName = $Group.Name
$wmi = Get-WmiObject -Query "SELECT * FROM Win32_GroupUser WHERE GroupComponent=`"Win32_Group.Domain='$Hostname',Name='$GroupName'`""
if ($wmi -ne $null)
{
foreach ($item in $wmi)
{
$data = $item.PartComponent -split "\,"
$domain = ($data[0] -split "=")[1]
$name = ($data[1] -split "=")[1]
$arr += ("$domain\$name").Replace("""","")
[Array]::Sort($arr)
}
}
echo ""
echo $GroupName
echo "======================"
echo $arr
}
}