Powershell * POWERSHELL SECURITY

Powershell Enum of Active Directory (Part 2)

Get a list of computer in the current domain : PS C:\Users\victim.SECURITY\Downloads\PowerTools-master\PowerTools-master\PowerView> Get-NetComputer PS C:\Users\victim.SECURITY\Downloads\PowerTools-master\PowerTools-master\PowerView> Get-NetComputer -OperatingSystem “*” PS C:\Users\victim.SECURITY\Downloads\PowerTools-master\PowerTools-master\PowerView> Get-NetComputer –Ping PS C:\Users\victim.SECURITY\Downloads\PowerTools-master\PowerTools-master\PowerView> Get-NetComputer -FullData AD : PS C:\Users\victim.SECURITY\Downloads\ADModule-master\ADModule-master> Get-ADComputer -Filter * | select Name PS C:\Users\victim.SECURITY\Downloads\ADModule-master\ADModule-master> Get-ADComputer -Filter * -Properties * Domain enumeration : Get all the groups in the current domain :…

Powershell * POWERSHELL SECURITY

Domain Enumeration – Part 3

Get list of GPO in current Domain : PS C:\Users\victim.SECURITY\Downloads\PowerTools-master\PowerTools-master\PowerView> Get-NetGPO Enumerate all the permissions for all GPOs in the current domain: PS C:\Users\victim.SECURITY\Downloads\PowerTools-master\PowerTools-master\PowerView> Get-NetGPO | %{Get-ObjectAcl -ResolveGUIDs -Name $_.Name} display name of “SecurePolicy”. Let’s track this back and see what systems this GPO is applied to: GUID we pick from above command on the basis of…