SharpStat is a C# utility that uses WMI to run “cmd.exe /c netstat -n”, save the output to a file, then use SMB to read and delete the file remotely. This script will attempt to connect to all the supplied computers and use WMI to execute cmd.exe /c netstat -n > <file>
.
The file the output is saved to is specified by ‘-file’. Once the netstat command is running, the output is read via remote SMB call and then deleted.
While this isn’t the stealthiest of scripts (because of the cmd.exe execution and saving to a file), sometimes you gotta do what you gotta do.
An alternative would be to use WMI to remotely query netstat information, but that WMI class is only available on Win10+ systems, which isn’t ideal. This solution at least works for all levels of operating systems.
Mandatory Options:
-file = This is the file that the output will be saved in
temporarily before being remotely read/deleted
Optional Options:
-computers = A list of systems to run this against, separated by commas
[or]
-dc = A domain controller to get a list of domain computers from
-domain = The domain to get a list of domain computers from
Also Read – Aaia : AWS Identity & Access Management Visualizer & Anomaly Finder
Examples
SharpStat.exe -file “C:\Users\Public\test.txt” -domain lab.raikia.com -dc lab.raikia.com
SharpStat.exe -file “C:\Users\Public\test.txt” -computers “wkstn7.lab.raikia.com,wkstn10.lab.raikia.com”
Credits : raikiasec@gmail.com or @raikiasec
The Mobile Evidence Acquisition Toolkit designed by BlackStone Discovery. Developed to enhance digital forensics, this…
Here are some tools that you can use for Social Media OSINT. In the ever-evolving…
Scoprite l'elenco completo delle distribuzioni di sistemi operativi per Windows, MacOS e Linux, specializzate in…
Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile…
cURL is a command line tool created in 1998 by Daniel Stenberg, a Swedish Developper/Programmer.Daniel Stenberg's…
bevigil-cli provides a unified command line interface and python library for using BeVigil OSINT API. BeVigil…