Shulou(Shulou.com)05/31 Report--

This article mainly introduces what WMIC is, has a certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, the following let the editor take you to understand it.

About wmic:

WMIC can be described as a set of methods and functions for managing Windows systems. We can use it as an API to communicate with the Windows system. The value of Wmic in penetration testing is that it does not need to be downloaded and installed, because wmic is a function of the Windows system, and the whole operation occurs in the memory of the computer without leaving any trace.

Wimc information collection

Retrieve the installed software of the system:

Wmic product list brief | more

Retrieve the services that the system is running:

Wmic service list brief | more

Search for running programs:

Wmic process list brief | more

Search for launcher:

Wmic startup list brief | more

Search for a shared drive:

Wmic netuse list brief | more

Search for user accounts:

Wmic useraccount list brief | more

Search for computer domain controllers:

Wmic ntdomain list brief

Search for logged-in users:

Wmic logon list brief | more

Search for installed security updates:

Wmic qfe list brief | more

WMIC executes the task

Wmic is not only used to retrieve system information, in penetration testing, it can also perform a variety of useful tasks using the appropriate commands.

Uninstall and reinstall the program:

In penetration testing, we often encounter anti-virus programs to prevent payload from running, at this time we can use the wmic command to uninstall anti-virus programs.

Wmic product where "name like'% forti'" get namewmic product where name like "% FortiClient" call uninstall

Stop running the antivirus service through the wmic command:

Wmic process where name= "xxx.exe" call terminate thank you for reading this article carefully. I hope the article "what is WMIC" shared by the editor will be helpful to you. At the same time, I also hope you will support us and follow the industry information channel. More related knowledge is waiting for you to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.