Check-LocalAdminHash

Check-LocalAdminHash Check-LocalAdminHash 是一个 PowerShell 工具，它尝试通过 WMI 或 SMB 使用密码哈希向多个主机进行身份验证，以确定所提供的凭据是否为本地管理员。当你获取到某个用户的密码哈希，并想查看该用户在网络中的哪些主机上是本地管理员时，这个工具非常有用。它本质上是我最喜欢的两款工具与我自身部分代码的“弗兰肯斯坦”式结合。它利用 Kevin Robertson（@kevinrobertson）的 Invoke-TheHash 项目进行凭据检查部分。此外，该脚本还使用了 Will Schroeder（@harmj0y）和...

Check-LocalAdminHash - A PowerShell Tool That Attempts To Authenticate To Multiple Hosts Over Either WMI Or SMB Using A Password Hash To Determine If The Provided Credential Is A Local Administrator

Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin ...

Windows Gather PSReadline History

Gathers Power Shell history data from the target machine. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather PSReadline History', 'Description' = %q Gathers Power Shell history data...