Gh0st
/
PowerSploit
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #136 from andyrobbins/dev 

Added name resolution to custom PSObject generated by Invoke-UserHunter.
This commit is contained in:
HarmJ0y 2016-05-09 21:12:42 -07:00
parent 6ada127538 9f7906280d
commit 31ed96d161
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
Recon/PowerView.ps1
View File

@ -9646,6 +9646,26 @@ function Invoke-UserHunter {
$FoundUser | Add-Member Noteproperty 'IPAddress' $IPAddress $FoundUser | Add-Member Noteproperty 'IPAddress' $IPAddress
$FoundUser | Add-Member Noteproperty 'SessionFrom' $CName $FoundUser | Add-Member Noteproperty 'SessionFrom' $CName
# Try to resolve the DNS hostname of $Cname
if ($Cname -match '[a-zA-Z]') {
Try {
$CNameDNSName = [System.Net.Dns]::GetHostByName($CName).Hostname
}
Catch {
$CNameDNSName = $Cname
}
$FoundUser | Add-Member NoteProperty 'SessionFromName' $CnameDNSName
}
else {
Try {
$CNameDNSName = [System.Net.Dns]::Resolve($Cname).HostName
}
Catch {
$CNameDNSName = $Cname
}
$FoundUser | Add-Member NoteProperty 'SessionFromName' $CnameDNSName
}
# see if we're checking to see if we have local admin access on this machine # see if we're checking to see if we have local admin access on this machine
if ($CheckAccess) { if ($CheckAccess) {
$Admin = Invoke-CheckLocalAdminAccess -ComputerName $CName $Admin = Invoke-CheckLocalAdminAccess -ComputerName $CName