Skip to content

A powershell script that prints a lot of IP and connection info to the screen

Notifications You must be signed in to change notification settings

Raikia/Get-ReconInfo

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 

Repository files navigation

Get-ReconInfo

NAME
    Get-ReconInfo
    
SYNOPSIS
    Lists connections and relevant info about a system
    
    
    Author: Chris King (@raikiasec)
    
    
SYNTAX
    Get-ReconInfo [<CommonParameters>]
    
    
DESCRIPTION
    This script runs the following commands on the local system, parses the output, and prints the results to the 
    screen:
          * netstat -ano
          * ipconfig /all
          * arp -a
          * tasklist /v
          * route print
          * net session
          * net localgroup "Administrators"
          * (Get-WmiObject Win32_ComputerSystem).Name
          * (Get-WmiObject Win32_ComputerSystem).Domain
     
    This is especially useful when run at-scale in a network where you may need to identify routes and connections 
    into a specific IP zone. You can
    execute this script on the remote systems and get greppable output to see if they have connections to your targets.
    
    This script pairs well with Invoke-RemoteScriptWithOutput from WMIOPS (https://github.com/ChrisTruncer/WMIOps).  
    Using WMIOps and this script,
    you can get connection information from a large number of systems very quickly, with easily digestable output.
    
    By default, the script returns the full raw output.  If you only want the greppable output, set $PRINT_FULL to 
    false.  Its not a parameter because WMIOPS
    does not accept parameters for Invoke-RemoteScriptWithOutput.  Its recommended you redirect the output to a file, 
    and then you can grep through the output
    easily.
    

RELATED LINKS

REMARKS
    To see the examples, type: "get-help Get-ReconInfo -examples".
    For more information, type: "get-help Get-ReconInfo -detailed".
    For technical information, type: "get-help Get-ReconInfo -full".

About

A powershell script that prints a lot of IP and connection info to the screen

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published