From a70bbe61647c00b529d38c72515bd3f0a0089c28 Mon Sep 17 00:00:00 2001
From: Meatballs <eat_meatballs@hotmail.co.uk>
Date: Tue, 1 Nov 2016 14:11:44 +0000
Subject: Add disabled and present searches to get-netfileservers

---
 Recon/PowerView.ps1 | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'Recon/PowerView.ps1')

diff --git a/Recon/PowerView.ps1 b/Recon/PowerView.ps1
index f1dd0a9..6dfccb4 100755
--- a/Recon/PowerView.ps1
+++ b/Recon/PowerView.ps1
@@ -5642,13 +5642,13 @@ function Get-NetFileServer {
             }
         }
     }
-
-    Get-NetUser -Domain $Domain -DomainController $DomainController -Credential $Credential -PageSize $PageSize | Where-Object {$_} | Where-Object {
+    $filter = "(!(userAccountControl:1.2.840.113556.1.4.803:=2))(|(scriptpath=*)(homedirectory=*)(profilepath=*))"
+    Get-NetUser -Domain $Domain -DomainController $DomainController -Credential $Credential -PageSize $PageSize -Filter $filter | Where-Object {$_} | Where-Object {
             # filter for any target users
             if($TargetUsers) {
                 $TargetUsers -Match $_.samAccountName
             }
-            else { $True } 
+            else { $True }
         } | ForEach-Object {
             # split out every potential file server path
             if($_.homedirectory) {
-- 
cgit v1.2.3