diff options
author | Matt Kelly <matt@Workstation031.wp.comcast.net> | 2016-05-05 19:12:33 -0500 |
---|---|---|
committer | Matt Kelly <matt@Workstation031.wp.comcast.net> | 2016-05-05 19:12:33 -0500 |
commit | 0cedaf61421c747d9de2e033430474107040d3c8 (patch) | |
tree | 6df5ef66359689289e7b99737014e1f2ba6a18c6 /ScriptModification/Usage.md | |
parent | 26cef85d358a2ac2acc44c1a199ac35b0e1bc17d (diff) | |
download | PowerSploit-0cedaf61421c747d9de2e033430474107040d3c8.tar.gz PowerSploit-0cedaf61421c747d9de2e033430474107040d3c8.zip |
Adds PSLoggedOn like functionality
Adding in Get-LoggedOnLocal which uses HKU registry checks to see who
is logged locally to a remote box and only requires user level access
rights. The benefit over NetWkstaUserEnum is less user privileges
required (admin for NetWkstaUserEnum) and is the same process
PSLoggedOn uses.
Invoke-PSLoggedOn launches both Get-LoggedOnLocal and Get-NetSessions
and outputs the same format as PSLoggedOn.exe from Sysinternals.
I did not change Invoke-UserHunter non-stealth to this option yet, but
it is beneficial in that if you use both HKU and NetSessionEnum you
only require basic user level rights not admin remote.
Diffstat (limited to 'ScriptModification/Usage.md')
0 files changed, 0 insertions, 0 deletions