What is WMIC?
This article mainly introduces what WMIC is, has a certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, the following let the editor take you to understand it.
About wmic:
WMIC can be described as a set of methods and functions for managing Windows systems. We can use it as an API to communicate with the Windows system. The value of Wmic in penetration testing is that it does not need to be downloaded and installed, because wmic is a function of the Windows system, and the whole operation occurs in the memory of the computer without leaving any trace.
Wimc information collection
Retrieve the installed software of the system:
Wmic product list brief | more
Retrieve the services that the system is running:
Wmic service list brief | more
Search for running programs:
Wmic process list brief | more
Search for launcher:
Wmic startup list brief | more
Search for a shared drive:
Wmic netuse list brief | more
Search for user accounts:
Wmic useraccount list brief | more
Search for computer domain controllers:
Wmic ntdomain list brief
Search for logged-in users:
Wmic logon list brief | more
Search for installed security updates:
Wmic qfe list brief | more
WMIC executes the task
Wmic is not only used to retrieve system information, in penetration testing, it can also perform a variety of useful tasks using the appropriate commands.
Uninstall and reinstall the program:
In penetration testing, we often encounter anti-virus programs to prevent payload from running, at this time we can use the wmic command to uninstall anti-virus programs.
Wmic product where "name like'% forti'" get namewmic product where name like "% FortiClient" call uninstall
Stop running the antivirus service through the wmic command:
Wmic process where name= "xxx.exe" call terminate thank you for reading this article carefully. I hope the article "what is WMIC" shared by the editor will be helpful to you. At the same time, I also hope you will support us and follow the industry information channel. More related knowledge is waiting for you to learn!
