BASIC | Scripting and security

Radio

SDRplay RSPduo First Look and Basic Overview / Demo of SDRuno and Dump1090

(2 votes, average: 5.00 out of 5)

PHP

Resumen de las operaciones con Memoria Compartida en PHP

(5 votes, average: 5.00 out of 5)

Ejemplo resumen de las operaciones con Memoria Compartida (http://php.net/manual/es/shmop.examples-basic.php)

<?php
   
// Crear un segmento de memoria compartida de 100 bytes con un identificador igual a 0xff3
$shm_id = shmop_open(0xff3, "c", 0644, 100);
if (!$shm_id) {
    echo "Couldn't create shared memory segment\n";
}

// Obtener tamaño del segmento de memoria compartida
$shm_size = shmop_size($shm_id);
echo "SHM Block Size: " . $shm_size . " has been created.\n";

// Escribir una cadena de prueba en la memoria compartida
$shm_bytes_written = shmop_write($shm_id, "Prueba en la memoria compartida", 0);

// Ahora vamos a leer la cadena de texto
$my_string = shmop_read($shm_id, 0, $shm_size);
if (!$my_string) {
    echo "Couldn't read from shared memory block\n";
}
echo "The data inside shared memory was: " . $my_string . "\n";

//Ahora vamos a eliminar y cerrar el segmento de memoria compartida
if (!shmop_delete($shm_id)) {
    echo "Couldn't mark shared memory block for deletion.";
}
shmop_close($shm_id);
   
?>

<?php

// Crear un segmento de memoria compartida de 100 bytes con un identificador igual a 0xff3

$shm_id = shmop_open(0xff3, "c", 0644, 100);

if (!$shm_id) {

echo "Couldn't create shared memory segment\n";

}

// Obtener tamaño del segmento de memoria compartida

$shm_size = shmop_size($shm_id);

echo "SHM Block Size: " . $shm_size . " has been created.\n";

// Escribir una cadena de prueba en la memoria compartida

$shm_bytes_written = shmop_write($shm_id, "Prueba en la memoria compartida", 0);

// Ahora vamos a leer la cadena de texto

$my_string = shmop_read($shm_id, 0, $shm_size);

if (!$my_string) {

echo "Couldn't read from shared memory block\n";

}

echo "The data inside shared memory was: " . $my_string . "\n";

//Ahora vamos a eliminar y cerrar el segmento de memoria compartida

if (!shmop_delete($shm_id)) {

echo "Couldn't mark shared memory block for deletion.";

}

shmop_close($shm_id);

Para utilizar shmop tendrá que compilar PHP con el parámetro –enable-shmop en […]

Security

FLOSS – FireEye Labs Obfuscated String Solver

(No Ratings Yet)

The FireEye Labs Obfuscated String Solver (FLOSS) uses advanced static analysis techniques to automatically deobfuscate strings from malware binaries. You can use it just […]

PHP Security

THC-Hydra 8.6

(1 votes, average: 5.00 out of 5)

Hydra is born more than 10 years ago, this page is used as a recap of the functionalities it provides, […]

PowerShell

3. Gestión del hardware en PowerShell (nivel intermedio)

(3 votes, average: 4.00 out of 5)

Procesador Memoria caché Memoria Acceso directo a memoria Discos duros Buses Conexiones E/S Dispositivos de entrada y salida Entrada Salida […]

Network PowerShell

Gets the basic network adapter by IfIndex

(No Ratings Yet)

Get-NetAdapter -ifIndex 14

1	Get-NetAdapter -ifIndex 14

Network PowerShell

Autenticarse en un router de fibra óptica Comtrend VG-8050 de Movistar mediante el usuario y la contraseña con PowerShell

(No Ratings Yet)

$user="1234"
$pass="1234"
$pair="${user}:${pass}"
$bytes=[System.Text.Encoding]::ASCII.GetBytes($pair)
$base64=[System.Convert]::ToBase64String($bytes)
$basicAuthValue="Basic $base64"
$headers=@{Authorization=$basicAuthValue}

$url='http://192.168.1.1/info.html'
$result=(Invoke-WebRequest -Uri $url -Headers $headers)
($result.AllElements | Where class -eq “hd”).outerText

$user="1234"

$pass="1234"

$pair="${user}:${pass}"

$bytes=[System.Text.Encoding]::ASCII.GetBytes($pair)

$base64=[System.Convert]::ToBase64String($bytes)

$basicAuthValue="Basic $base64"

$headers=@{Authorization=$basicAuthValue}

$url='http://192.168.1.1/info.html'

$result=(Invoke-WebRequest -Uri $url -Headers $headers)

($result.AllElements | Where class -eq “hd”).outerText

Filesystem Hardware Network Processes

WMI Classes (detailed)

(No Ratings Yet)

Class: Description 
Win32_1394Controller: Represents the capabilities and management of a 1394 controller.
Win32_1394ControllerDevice: Relates the high-speed serial bus (IEEE 1394 Firewire) Controller and the CIM_LogicalDevice instance connected to it.
Win32_Account: Represents information about user accounts and group accounts known to the computer system running Windows.
Win32_AccountSID: Relates a security account instance with a security descriptor instance.
Win32_ACE: Represents an access control entry (ACE).
Win32_ActiveRoute: Relates the current IP4 route to the persisted IP route table.
Win32_AllocatedResource: Relates a logical device to a system resource.
Win32_AssociatedProcessorMemory: Relates a processor and its cache memory.
Win32_AutochkSetting: Represents the settings for the autocheck operation of a disk.
Win32_BaseBoard: Represents a baseboard (also known as a motherboard or system board).
Win32_BaseService: Represents executable objects that are installed in a registry database maintained by the Service Control Manager.
Win32_Battery: Represents a battery connected to the computer system.
Win32_BIOS: Represents the attributes of the computer system's basic input or output services (BIOS) that are installed on the computer.
Win32_BootConfiguration: Represents the boot configuration of a computer system running Windows.
Win32_Bus: Represents a physical bus as seen by a Windows operating system.
Win32_CacheMemory: Represents cache memory (internal and external) on a computer system.
Win32_CDROMDrive: Represents a CD-ROM drive on a computer system running Windows.
Win32_CIMLogicalDeviceCIMDataFile: Relates logical devices and data files, indicating the driver files used by the device.
Win32_ClassicCOMApplicationClasses: Relates a DCOM application and a COM component grouped under it.
Win32_ClassicCOMClass: Represents the properties of a COM component.
Win32_ClassicCOMClassSettings: Relates a COM class and the settings used to configure instances of the COM class.
Win32_ClientApplicationSetting: Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.
Win32_CollectionStatistics: Relates a managed system element collection and the class representing statistical information about the collection.
Win32_COMApplication: Represents a COM application.
Win32_COMApplicationClasses: Relates a COM component and the COM application where it resides.
Win32_COMApplicationSettings: Relates a DCOM application and its configuration settings.
Win32_COMClass: Represents the properties of a COM component.
Win32_ComClassAutoEmulator: Relates a COM class and another COM class that it automatically emulates.
Win32_ComClassEmulator: Relates two versions of a COM class.
Win32_ComponentCategory: Represents a component category.
Win32_ComputerShutdownEvent: Represents computer shutdown events.
Win32_ComputerSystem: Represents a computer system operating in a Windows environment.
Win32_ComputerSystemEvent: Represents events related to a computer system.
Win32_ComputerSystemProcessor: Relates a computer system and a processor running on that system.
Win32_ComputerSystemProduct: Represents a product.
Win32_ComputerSystemWindowsProductActivationSetting: Relates instances of Win32_ComputerSystem andWin32_WindowsProductActivation.
Win32_COMSetting: Represents the settings associated with a COM component or COM application.
Win32_ConnectionShare: Relates a shared resource on the computer and the connection made to the shared resource.
Win32_ControllerHasHub: Represents the hubs downstream from the universal serial bus (USB) controller.
Win32_CurrentProbe: Represents the properties of a current monitoring sensor (ammeter).
Win32_CurrentTime: Represents an instance in time as component seconds, minutes, day of the week, and so on.
Win32_DCOMApplication: Represents the properties of a DCOM application.
Win32_DCOMApplicationAccessAllowedSetting: Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.
Win32_DCOMApplicationLaunchAllowedSetting: Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.
Win32_DCOMApplicationSetting: Represents the settings of a DCOM application.
Win32_DependentService: Relates two interdependent base services.
Win32_Desktop: Represents the common characteristics of a user's desktop.
Win32_DesktopMonitor: Represents the type of monitor or display device attached to the computer system.
Win32_DeviceBus: Relates a system bus and a logical device using the bus.
Win32_DeviceChangeEvent: Represents device change events resulting from the addition, removal, or modification of devices on the computer system.
Win32_DeviceMemoryAddress: Represents a device memory address on a Windows system.
Win32_DeviceSettings: Relates a logical device and a setting that can be applied to it.
Win32_DFSNode: Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).
Win32_DFSNodeTarget: Represents the relationship of a DFS node to one of its targets.
Win32_DFSTarget: Represents the target of a DFS node.
Win32_Directory: Represents a directory entry on a computer system running Windows.
Win32_DirectorySpecification: Represents the directory layout for the product.
Win32_DiskDrive: Represents a physical disk drive as seen by a computer running the Windows operating system.
Win32_DiskDriveToDiskPartition: Relates a disk drive and a partition existing on it.
Win32_DiskPartition: Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.
Win32_DiskQuota: Tracks disk space usage for NTFS file system volumes.
Win32_DisplayControllerConfiguration: Represents the video adapter configuration information of a computer system running Windows. This class is obsolete. In place of this class, use the properties in the Win32_VideoController, Win32_DesktopMonitor, and CIM_VideoControllerResolution classes.
Win32_DMAChannel: Represents a direct memory access (DMA) channel on a computer system running Windows.
Win32_DriverForDevice: Relates a printer to a printer driver.
Win32_Environment: Represents an environment or system environment setting on a computer system running Windows.
Win32_Fan: Represents the properties of a fan device in the computer system.
Win32_FloppyController: Represents the capabilities and management capacity of a floppy disk drive controller.
Win32_FloppyDrive: Manages the capabilities of a floppy disk drive.
Win32_Group: Represents data about a group account.
Win32_GroupInDomain: Identifies the group accounts associated with a Windows NT domain.
Win32_GroupUser: Relates a group and an account that is a member of that group.
Win32_HeatPipe: Represents the properties of a heat pipe cooling device.
Win32_IDEController: Represents the capabilities of an Integrated Drive Electronics (IDE) controller device.
Win32_IDEControllerDevice: Association class that relates an IDE controller and the logical device.
Win32_ImplementedCategory: Relates a component category and the COM class using its interfaces.
Win32_InfraredDevice: Represents the capabilities and management of an infrared device.
Win32_IP4PersistedRouteTable: Represents persisted IP routes.
Win32_IP4RouteTable: Represents information that governs the routing of network data packets.
Win32_IP4RouteTableEvent: Represents IP route change events.
Win32_IRQResource: Represents an interrupt request line (IRQ) number on a Windows computer system.
Win32_Keyboard: Represents a keyboard installed on a computer system running Windows.
Win32_LoadOrderGroup: Represents a group of system services that define execution dependencies.
Win32_LoadOrderGroupServiceDependencies: Represents an association between a base service and a load order group that the service depends on to start running.
Win32_LoadOrderGroupServiceMembers: Relates a load order group and a base service.
Win32_LocalTime: Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.
Win32_LogicalDisk: Represents a data source that resolves to an actual local storage device on a computer system running Windows.
Win32_LogicalDiskRootDirectory: Relates a logical disk and its directory structure.
Win32_LogicalDiskToPartition: Relates a logical disk drive and the disk partition it resides on.
Win32_LogicalFileAccess: Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).
Win32_LogicalFileAuditing: Relates the security settings of a file or directory one member of its system access control list (SACL).
Win32_LogicalFileGroup: Relates the security settings of a file or directory and its group.
Win32_LogicalFileOwner: Relates the security settings of a file or directory and its owner.
Win32_LogicalFileSecuritySetting: Represents security settings for a logical file.
Win32_LogicalProgramGroup: Represents a program group in a computer system running Windows.
Win32_LogicalProgramGroupDirectory: Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.
Win32_LogicalProgramGroupItem: Represents an element contained by a Win32_ProgramGroup instance, that is not itself anotherWin32_ProgramGroup instance.
Win32_LogicalProgramGroupItemDataFile: Relates the program group items of the Start menu, and the files in which they are stored.
Win32_LogicalShareAccess: Relates the security settings of a share and one member of its DACL.
Win32_LogicalShareAuditing: Relates the security settings of a share and one member of its SACL.
Win32_LogicalShareSecuritySetting: Represents security settings for a logical file.
Win32_LogonSession: Describes the logon session or sessions associated with a user logged on to Windows.
Win32_LogonSessionMappedDisk: Represents the mapped logical disks associated with the session.
Win32_LUID: Represents a locally unique identifier (LUID)
Win32_LUIDandAttributes: Represents a LUID and its attributes.
Win32_MappedLogicalDisk: Represents network storage devices that are mapped as logical disks on the computer system running Windows.
Win32_MemoryArray: Represents the properties of the computer system memory array and mapped addresses.
Win32_MemoryArrayLocation: Relates a logical memory array and the physical memory array upon which it exists.
Win32_MemoryDevice: Represents the properties of a computer system's memory device along with its associated mapped addresses.
Win32_MemoryDeviceArray: Relates a memory device and the memory array in which it resides.
Win32_MemoryDeviceLocation: Association class that relates a memory device and the physical memory on which it exists.
Win32_MethodParameterClass: Abstract, base class that implements method parameters derived from this class.
Win32_ModuleLoadTrace: Indicates that a process has loaded a new module.
Win32_ModuleTrace: Base event for module events.
Win32_MotherboardDevice: Represents a device that contains the central components of the computer system running Windows.
Win32_NamedJobObject: Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.
Win32_NamedJobObjectActgInfo: Represents the I/O accounting information for a job object.
Win32_NamedJobObjectLimit: Represents an association between a job object and the job object limit settings.
Win32_NamedJobObjectLimitSetting: Represents the limit settings for a job object.
Win32_NamedJobObjectProcess: Relates a job object and the process contained in the job object.
Win32_NamedJobObjectSecLimit: Relates a job object and the job object security limit settings.
Win32_NamedJobObjectSecLimitSetting: Represents the security limit settings for a job object.
Win32_NamedJobObjectStatistics: Represents an association between a job object and the job object I/O accounting information class.
Win32_NetworkAdapter: Represents a network adapter on a computer system running Windows.
Win32_NetworkAdapterConfiguration: Represents the attributes and behaviors of a network adapter. The class is not guaranteed to be supported after the ratification of the Distributed Management Task Force (DMTF) CIM network specification.
Win32_NetworkAdapterSetting: Relates a network adapter and its configuration settings.
Win32_NetworkClient: Represents a network client on a computer system running Windows.
Win32_NetworkConnection: Represents an active network connection in a Windows environment.
Win32_NetworkLoginProfile: Represents the network login information of a specific user on a computer system running Windows.
Win32_NetworkProtocol: Represents a protocol and its network characteristics on a computer system running Windows.
Win32_NTDomain: Represents a Windows NT domain.
Win32_NTEventlogFile: Represents data stored in a Windows Event log file.
Win32_NTLogEvent: Represents Windows events.
Win32_NTLogEventComputer: Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.
Win32_NTLogEventLog: Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.
Win32_NTLogEventUser: Relates instances of Win32_NTLogEvent and Win32_UserAccount.
Win32_OnBoardDevice: Represents common adapter devices built into the motherboard (system board).
Win32_OperatingSystem: Represents an operating system installed on a computer system running Windows.
Win32_OperatingSystemAutochkSetting: Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.
Win32_OperatingSystemQFE: Relates an operating system and product updates applied as represented inWin32_QuickFixEngineering.
Win32_OSRecoveryConfiguration: Represents the types of information that will be gathered from memory when the operating system fails.
Win32_PageFile: Represents the file used for handling virtual memory file swapping on a Windows system.
Win32_PageFileElementSetting: Relates the initial settings of a page file and the state of those settings during normal use.
Win32_PageFileSetting: Represents the settings of a page file.
Win32_PageFileUsage: Represents the file used for handling virtual memory file swapping on a computer system running Windows.
Win32_ParallelPort: Represents the properties of a parallel port on a computer system running Windows.
Win32_PCMCIAController: Manages the capabilities of a Personal Computer Memory Card Interface Adapter (PCMCIA) controller device.
Win32_Perf: The base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData.
Win32_PerfFormattedData: an abstract base class for the pre-installed, calculated data classes.
Win32_PerfRawData: The abstract base class for all concrete raw performance counter classes.
Win32_PhysicalMedia: Represents any type of documentation or storage medium.
Win32_PhysicalMemory: Represents a physical memory device located on a computer as available to the operating system.
Win32_PhysicalMemoryArray: Represents details about the computer system's physical memory.
Win32_PhysicalMemoryLocation: Relates an array of physical memory and its physical memory.
Win32_PingStatus: Represents the values returned by the standard ping command.
Win32_PNPAllocatedResource: Represents an association between logical devices and system resources.
Win32_PNPDevice: Relates a device (known to Configuration Manager as a PNPEntity), and the function it performs.
Win32_PNPEntity: Represents the properties of a Plug and Play device.
Win32_PointingDevice: Represents an input device used to point to and select regions on the display of a computer system running Windows.
Win32_PortableBattery: Represents the properties of a portable battery, such as one used for a notebook computer.
Win32_PortConnector: Represents physical connection ports, such as DB-25 pin male, Centronics, and PS/2.
Win32_PortResource: Represents an I/O port on a computer system running Windows.
Win32_POTSModem: Represents the services and characteristics of a Plain Old Telephone Service (POTS) modem on a computer system running Windows.
Win32_POTSModemToSerialPort: Relates a modem and the serial port the modem uses.
Win32_PowerManagementEvent: Represents power management events resulting from power state changes.
Win32_Printer: Represents a device connected to a computer system running Windows that is capable of reproducing a visual image on a medium.
Win32_PrinterConfiguration: Defines the configuration for a printer device.
Win32_PrinterController: Relates a printer and the local device to which the printer is connected.
Win32_PrinterDriver: Represents the drivers for a Win32_Printer instance.
Win32_PrinterDriverDll: Relates a local printer and its driver file (not the driver itself).
Win32_PrinterSetting: Relates a printer and its configuration settings.
Win32_PrinterShare: Relates a local printer and the share that represents it as it is viewed over a network.
Win32_PrintJob: Represents a print job generated by a Windows-based application.
Win32_PrivilegesStatus: Represents information about the privileges required to complete an operation.
Win32_Process: Represents a sequence of events on a computer system running Windows.
Win32_Processor: Represents a device capable of interpreting a sequence of machine instructions on a computer system running Windows.
Win32_ProcessStartTrace: Indicates that a new process has started.
Win32_ProcessStartup: Represents the startup configuration of a computer system running Windows.
Win32_ProcessStopTrace: Indicates that a process has terminated.
Win32_ProcessTrace: Base event for process events.
Win32_ProgramGroupContents: Relates a program group order and an individual program group or item contained in it.
Win32_ProgramGroupOrItem: Represents a logical grouping of programs on the user's Start|Programs menu.
Win32_ProtocolBinding: Relates a system-level driver, network protocol, and network adapter.
Win32_Proxy: Contains properties and methods to query and configure an Internet connection related to WPA.
Win32_QuickFixEngineering: Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.
Win32_QuotaSetting: Contains setting information for disk quotas on a volume.
Win32_Refrigeration: Represents the properties of a refrigeration device.
Win32_Registry: Represents the system registry on a computer system running Windows.
Win32_ScheduledJob: Represents a job scheduled using the Windows schedule service.
Win32_SCSIController: Represents a small computer system interface (SCSI) controller on a computer system running Windows.
Win32_SCSIControllerDevice: Relates a SCSI controller and the logical device (disk drive) connected to it.
Win32_SecurityDescriptor: Represents a structural representation of a SECURITY_DESCRIPTOR.
Win32_SecuritySetting: Represents security settings for a managed element.
Win32_SecuritySettingAccess: Represents the rights granted and denied to a trustee for a given object.
Win32_SecuritySettingAuditing: Represents the auditing for a given trustee on a given object.
Win32_SecuritySettingGroup: Relates the security of an object and its group.
Win32_SecuritySettingOfLogicalFile: Represents security settings of a file or directory object.
Win32_SecuritySettingOfLogicalShare: Represents security settings of a shared object.
Win32_SecuritySettingOfObject: Relates an object to its security settings.
Win32_SecuritySettingOwner: Relates the security settings of an object and its owner.
Win32_SerialPort: Represents a serial port on a computer system running Windows.
Win32_SerialPortConfiguration: Represents the settings for data transmission on a Windows serial port.
Win32_SerialPortSetting: Relates a serial port and its configuration settings.
Win32_ServerConnection: Represents the connections made from a remote computer to a shared resource on the local computer.
Win32_ServerSession: Represents the sessions that are established with the local computer by users on a remote computer.
Win32_Service: Represents a service on a computer system running Windows.
Win32_SessionConnection: Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.
Win32_SessionProcess: Represents an association between a logon session and the processes associated with that session.
Win32_ShadowBy: Represents the association between a shadow copy and the provider that creates the shadow copy.
Win32_ShadowContext: Specifies how a shadow copy is to be created, queried, or deleted.
Win32_ShadowCopy: Represents a duplicate copy of the original volume at a previous time.
Win32_ShadowDiffVolumeSupport: Represents an association between a shadow copy provider and a storage volume.
Win32_ShadowFor: Represents an association between a shadow copy and the volume for which the shadow copy is created.
Win32_ShadowOn: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowProvider: Represents a component that creates and represents volume shadow copies.
Win32_ShadowStorage: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowVolumeSupport: Represents an association between a shadow copy provider with a supported volume.
Win32_Share: Represents a shared resource on a computer system running Windows.
Win32_ShareToDirectory: Relates a shared resource on the computer system and the directory to which it is mapped.
Win32_ShortcutFile: Represents files that are shortcuts to other files, directories, and commands.
Win32_SID: Represents an arbitrary SID.
Win32_SIDandAttributes: Represents a security identifier (SID) and its attributes.
Win32_SMBIOSMemory: Represents the capabilities and management of memory-related logical devices.
Win32_SoundDevice: Represents the properties of a sound device on a computer system running Windows.
Win32_StartupCommand: Represents a command that runs automatically when a user logs onto the computer system.
Win32_SubDirectory: Relates a directory (folder) and one of its subdirectories (subfolders).
Win32_SystemAccount: Represents a system account.
Win32_SystemBIOS: Relates a computer system (including data such as startup properties, time zones, boot configurations, or administrative passwords) and a system BIOS (services, languages, and system management properties).
Win32_SystemBootConfiguration: Relates a computer system and its boot configuration.
Win32_SystemConfigurationChangeEvent: Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).
Win32_SystemDesktop: Relates a computer system and its desktop configuration.
Win32_SystemDevices: Relates a computer system and a logical device installed on that system.
Win32_SystemDriver: Represents the system driver for a base service.
Win32_SystemDriverPNPEntity: Relates a Plug and Play device on the Windows computer system and the driver that supports the Plug and Play device.
Win32_SystemEnclosure: Represents the properties associated with a physical system enclosure.
Win32_SystemLoadOrderGroups: Relates a computer system and a load order group.
Win32_SystemMemoryResource: Represents a system memory resource on a Windows system.
Win32_SystemNetworkConnections: Relates a network connection and the computer system on which it resides.
Win32_SystemOperatingSystem: Relates a computer system and its operating system.
Win32_SystemPartitions: Relates a computer system and a disk partition on that system.
Win32_SystemProcesses: Relates a computer system and a process running on that system.
Win32_SystemProgramGroups: Relates a computer system and a logical program group.
Win32_SystemResources: Relates a system resource and the computer system it resides on.
Win32_SystemServices: Relates a computer system and a service program that exists on the system.
Win32_SystemSetting: Relates a computer system and a general setting on that system.
Win32_SystemSlot: Represents physical connection points including ports, motherboard slots and peripherals, and proprietary connections points.
Win32_SystemSystemDriver: Relates a computer system and a system driver running on that computer system.
Win32_SystemTimeZone: Relates a computer system and a time zone.
Win32_SystemTrace: Base class for all system trace events, including module, process, and thread traces.
Win32_SystemUsers: Relates a computer system and a user account on that system.
Win32_TapeDrive: Represents a tape drive on a computer system running Windows.
Win32_TCPIPPrinterPort: Represents a TCP/IP service access point.
Win32_TemperatureProbe: Represents the properties of a temperature sensor (electronic thermometer).
Win32_Thread: Represents a thread of execution.
Win32_ThreadStartTrace: Indicates a new thread has started.
Win32_ThreadStopTrace: Indicates that a thread has stopped.
Win32_ThreadTrace: Base event class for thread events.
Win32_TimeZone: Represents the time zone information for a computer system running Windows.
Win32_TokenGroups: Represents information about the group SIDs in an access token.
Win32_TokenPrivileges: Represents information about a set of privileges for an access token.
Win32_Trustee: Represents a trustee.
Win32_USBController: Manages the capabilities of a universal serial bus (USB) controller.
Win32_USBControllerDevice: Relates a USB controller and the CIM_LogicalDevice instances connected to it.
Win32_USBHub: Represents the management characteristics of a USB hub.
Win32_UserAccount: Represents information about a user account on a computer system running Windows.
Win32_UserDesktop: Relates a user account and the desktop settings that are specific to it.
Win32_UserInDomain: Relates a user account and a Windows NT domain.
Win32_UTCTime: Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.
Win32_VideoController: Represents the capabilities and management capacity of the video controller on a computer system running Windows.
Win32_VideoSettings: Relates a video controller and video settings that can be applied to it.
Win32_VoltageProbe: Represents the properties of a voltage sensor (electronic voltmeter).
Win32_Volume: Represents an area of storage on a hard disk.
Win32_Volume: Represents an area of storage on a hard disk.
Win32_VolumeChangeEvent: Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.
Win32_VolumeQuota: Relates a volume to the per volume quota settings.
Win32_VolumeQuotaSetting: Relates disk quota settings with a specific disk volume.
Win32_VolumeUserQuota: Relates per user quotas to quota-enabled volumes.
Win32_VolumeUserQuota: Represents a volume to the per volume quota settings.
Win32_WindowsProductActivation: Contains properties and methods related to WPA.
Win32_WMIElementSetting: Association between a service running in the Windows system, and the WMI settings it can use.
Win32_WMISetting: Contains the operational parameters for the WMI service.

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

Class: Description

Win32_1394Controller: Represents the capabilities and management of a 1394 controller.

Win32_1394ControllerDevice: Relates the high-speed serial bus (IEEE 1394 Firewire) Controller and the CIM_LogicalDevice instance connected to it.

Win32_Account: Represents information about user accounts and group accounts known to the computer system running Windows.

Win32_AccountSID: Relates a security account instance with a security descriptor instance.

Win32_ACE: Represents an access control entry (ACE).

Win32_ActiveRoute: Relates the current IP4 route to the persisted IP route table.

Win32_AllocatedResource: Relates a logical device to a system resource.

Win32_AssociatedProcessorMemory: Relates a processor and its cache memory.

Win32_AutochkSetting: Represents the settings for the autocheck operation of a disk.

Win32_BaseBoard: Represents a baseboard (also known as a motherboard or system board).

Win32_BaseService: Represents executable objects that are installed in a registry database maintained by the Service Control Manager.

Win32_Battery: Represents a battery connected to the computer system.

Win32_BIOS: Represents the attributes of the computer system's basic input or output services (BIOS) that are installed on the computer.

Win32_BootConfiguration: Represents the boot configuration of a computer system running Windows.

Win32_Bus: Represents a physical bus as seen by a Windows operating system.

Win32_CacheMemory: Represents cache memory (internal and external) on a computer system.

Win32_CDROMDrive: Represents a CD-ROM drive on a computer system running Windows.

Win32_CIMLogicalDeviceCIMDataFile: Relates logical devices and data files, indicating the driver files used by the device.

Win32_ClassicCOMApplicationClasses: Relates a DCOM application and a COM component grouped under it.

Win32_ClassicCOMClass: Represents the properties of a COM component.

Win32_ClassicCOMClassSettings: Relates a COM class and the settings used to configure instances of the COM class.

Win32_ClientApplicationSetting: Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.

Win32_CollectionStatistics: Relates a managed system element collection and the class representing statistical information about the collection.

Win32_COMApplication: Represents a COM application.

Win32_COMApplicationClasses: Relates a COM component and the COM application where it resides.

Win32_COMApplicationSettings: Relates a DCOM application and its configuration settings.

Win32_COMClass: Represents the properties of a COM component.

Win32_ComClassAutoEmulator: Relates a COM class and another COM class that it automatically emulates.

Win32_ComClassEmulator: Relates two versions of a COM class.

Win32_ComponentCategory: Represents a component category.

Win32_ComputerShutdownEvent: Represents computer shutdown events.

Win32_ComputerSystem: Represents a computer system operating in a Windows environment.

Win32_ComputerSystemEvent: Represents events related to a computer system.

Win32_ComputerSystemProcessor: Relates a computer system and a processor running on that system.

Win32_ComputerSystemProduct: Represents a product.

Win32_ComputerSystemWindowsProductActivationSetting: Relates instances of Win32_ComputerSystem andWin32_WindowsProductActivation.

Win32_COMSetting: Represents the settings associated with a COM component or COM application.

Win32_ConnectionShare: Relates a shared resource on the computer and the connection made to the shared resource.

Win32_ControllerHasHub: Represents the hubs downstream from the universal serial bus (USB) controller.

Win32_CurrentProbe: Represents the properties of a current monitoring sensor (ammeter).

Win32_CurrentTime: Represents an instance in time as component seconds, minutes, day of the week, and so on.

Win32_DCOMApplication: Represents the properties of a DCOM application.

Win32_DCOMApplicationAccessAllowedSetting: Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.

Win32_DCOMApplicationLaunchAllowedSetting: Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.

Win32_DCOMApplicationSetting: Represents the settings of a DCOM application.

Win32_DependentService: Relates two interdependent base services.

Win32_Desktop: Represents the common characteristics of a user's desktop.

Win32_DesktopMonitor: Represents the type of monitor or display device attached to the computer system.

Win32_DeviceBus: Relates a system bus and a logical device using the bus.

Win32_DeviceChangeEvent: Represents device change events resulting from the addition, removal, or modification of devices on the computer system.

Win32_DeviceMemoryAddress: Represents a device memory address on a Windows system.

Win32_DeviceSettings: Relates a logical device and a setting that can be applied to it.

Win32_DFSNode: Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).

Win32_DFSNodeTarget: Represents the relationship of a DFS node to one of its targets.

Win32_DFSTarget: Represents the target of a DFS node.

Win32_Directory: Represents a directory entry on a computer system running Windows.

Win32_DirectorySpecification: Represents the directory layout for the product.

Win32_DiskDrive: Represents a physical disk drive as seen by a computer running the Windows operating system.

Win32_DiskDriveToDiskPartition: Relates a disk drive and a partition existing on it.

Win32_DiskPartition: Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.

Win32_DiskQuota: Tracks disk space usage for NTFS file system volumes.

Win32_DisplayControllerConfiguration: Represents the video adapter configuration information of a computer system running Windows. This class is obsolete. In place of this class, use the properties in the Win32_VideoController, Win32_DesktopMonitor, and CIM_VideoControllerResolution classes.

Win32_DMAChannel: Represents a direct memory access (DMA) channel on a computer system running Windows.

Win32_DriverForDevice: Relates a printer to a printer driver.

Win32_Environment: Represents an environment or system environment setting on a computer system running Windows.

Win32_Fan: Represents the properties of a fan device in the computer system.

Win32_FloppyController: Represents the capabilities and management capacity of a floppy disk drive controller.

Win32_FloppyDrive: Manages the capabilities of a floppy disk drive.

Win32_Group: Represents data about a group account.

Win32_GroupInDomain: Identifies the group accounts associated with a Windows NT domain.

Win32_GroupUser: Relates a group and an account that is a member of that group.

Win32_HeatPipe: Represents the properties of a heat pipe cooling device.

Win32_IDEController: Represents the capabilities of an Integrated Drive Electronics (IDE) controller device.

Win32_IDEControllerDevice: Association class that relates an IDE controller and the logical device.

Win32_ImplementedCategory: Relates a component category and the COM class using its interfaces.

Win32_InfraredDevice: Represents the capabilities and management of an infrared device.

Win32_IP4PersistedRouteTable: Represents persisted IP routes.

Win32_IP4RouteTable: Represents information that governs the routing of network data packets.

Win32_IP4RouteTableEvent: Represents IP route change events.

Win32_IRQResource: Represents an interrupt request line (IRQ) number on a Windows computer system.

Win32_Keyboard: Represents a keyboard installed on a computer system running Windows.

Win32_LoadOrderGroup: Represents a group of system services that define execution dependencies.

Win32_LoadOrderGroupServiceDependencies: Represents an association between a base service and a load order group that the service depends on to start running.

Win32_LoadOrderGroupServiceMembers: Relates a load order group and a base service.

Win32_LocalTime: Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.

Win32_LogicalDisk: Represents a data source that resolves to an actual local storage device on a computer system running Windows.

Win32_LogicalDiskRootDirectory: Relates a logical disk and its directory structure.

Win32_LogicalDiskToPartition: Relates a logical disk drive and the disk partition it resides on.

Win32_LogicalFileAccess: Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).

Win32_LogicalFileAuditing: Relates the security settings of a file or directory one member of its system access control list (SACL).

Win32_LogicalFileGroup: Relates the security settings of a file or directory and its group.

Win32_LogicalFileOwner: Relates the security settings of a file or directory and its owner.

Win32_LogicalFileSecuritySetting: Represents security settings for a logical file.

Win32_LogicalProgramGroup: Represents a program group in a computer system running Windows.

Win32_LogicalProgramGroupDirectory: Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.

Win32_LogicalProgramGroupItem: Represents an element contained by a Win32_ProgramGroup instance, that is not itself anotherWin32_ProgramGroup instance.

Win32_LogicalProgramGroupItemDataFile: Relates the program group items of the Start menu, and the files in which they are stored.

Win32_LogicalShareAccess: Relates the security settings of a share and one member of its DACL.

Win32_LogicalShareAuditing: Relates the security settings of a share and one member of its SACL.

Win32_LogicalShareSecuritySetting: Represents security settings for a logical file.

Win32_LogonSession: Describes the logon session or sessions associated with a user logged on to Windows.

Win32_LogonSessionMappedDisk: Represents the mapped logical disks associated with the session.

Win32_LUID: Represents a locally unique identifier (LUID)

Win32_LUIDandAttributes: Represents a LUID and its attributes.

Win32_MappedLogicalDisk: Represents network storage devices that are mapped as logical disks on the computer system running Windows.

Win32_MemoryArray: Represents the properties of the computer system memory array and mapped addresses.

Win32_MemoryArrayLocation: Relates a logical memory array and the physical memory array upon which it exists.

Win32_MemoryDevice: Represents the properties of a computer system's memory device along with its associated mapped addresses.

Win32_MemoryDeviceArray: Relates a memory device and the memory array in which it resides.

Win32_MemoryDeviceLocation: Association class that relates a memory device and the physical memory on which it exists.

Win32_MethodParameterClass: Abstract, base class that implements method parameters derived from this class.

Win32_ModuleLoadTrace: Indicates that a process has loaded a new module.

Win32_ModuleTrace: Base event for module events.

Win32_MotherboardDevice: Represents a device that contains the central components of the computer system running Windows.

Win32_NamedJobObject: Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.

Win32_NamedJobObjectActgInfo: Represents the I/O accounting information for a job object.

Win32_NamedJobObjectLimit: Represents an association between a job object and the job object limit settings.

Win32_NamedJobObjectLimitSetting: Represents the limit settings for a job object.

Win32_NamedJobObjectProcess: Relates a job object and the process contained in the job object.

Win32_NamedJobObjectSecLimit: Relates a job object and the job object security limit settings.

Win32_NamedJobObjectSecLimitSetting: Represents the security limit settings for a job object.

Win32_NamedJobObjectStatistics: Represents an association between a job object and the job object I/O accounting information class.

Win32_NetworkAdapter: Represents a network adapter on a computer system running Windows.

Win32_NetworkAdapterConfiguration: Represents the attributes and behaviors of a network adapter. The class is not guaranteed to be supported after the ratification of the Distributed Management Task Force (DMTF) CIM network specification.

Win32_NetworkAdapterSetting: Relates a network adapter and its configuration settings.

Win32_NetworkClient: Represents a network client on a computer system running Windows.

Win32_NetworkConnection: Represents an active network connection in a Windows environment.

Win32_NetworkLoginProfile: Represents the network login information of a specific user on a computer system running Windows.

Win32_NetworkProtocol: Represents a protocol and its network characteristics on a computer system running Windows.

Win32_NTDomain: Represents a Windows NT domain.

Win32_NTEventlogFile: Represents data stored in a Windows Event log file.

Win32_NTLogEvent: Represents Windows events.

Win32_NTLogEventComputer: Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.

Win32_NTLogEventLog: Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.

Win32_NTLogEventUser: Relates instances of Win32_NTLogEvent and Win32_UserAccount.

Win32_OnBoardDevice: Represents common adapter devices built into the motherboard (system board).

Win32_OperatingSystem: Represents an operating system installed on a computer system running Windows.

Win32_OperatingSystemAutochkSetting: Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.

Win32_OperatingSystemQFE: Relates an operating system and product updates applied as represented inWin32_QuickFixEngineering.

Win32_OSRecoveryConfiguration: Represents the types of information that will be gathered from memory when the operating system fails.

Win32_PageFile: Represents the file used for handling virtual memory file swapping on a Windows system.

Win32_PageFileElementSetting: Relates the initial settings of a page file and the state of those settings during normal use.

Win32_PageFileSetting: Represents the settings of a page file.

Win32_PageFileUsage: Represents the file used for handling virtual memory file swapping on a computer system running Windows.

Win32_ParallelPort: Represents the properties of a parallel port on a computer system running Windows.

Win32_PCMCIAController: Manages the capabilities of a Personal Computer Memory Card Interface Adapter (PCMCIA) controller device.

Win32_Perf: The base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData.

Win32_PerfFormattedData: an abstract base class for the pre-installed, calculated data classes.

Win32_PerfRawData: The abstract base class for all concrete raw performance counter classes.

Win32_PhysicalMedia: Represents any type of documentation or storage medium.

Win32_PhysicalMemory: Represents a physical memory device located on a computer as available to the operating system.

Win32_PhysicalMemoryArray: Represents details about the computer system's physical memory.

Win32_PhysicalMemoryLocation: Relates an array of physical memory and its physical memory.

Win32_PingStatus: Represents the values returned by the standard ping command.

Win32_PNPAllocatedResource: Represents an association between logical devices and system resources.

Win32_PNPDevice: Relates a device (known to Configuration Manager as a PNPEntity), and the function it performs.

Win32_PNPEntity: Represents the properties of a Plug and Play device.

Win32_PointingDevice: Represents an input device used to point to and select regions on the display of a computer system running Windows.

Win32_PortableBattery: Represents the properties of a portable battery, such as one used for a notebook computer.

Win32_PortConnector: Represents physical connection ports, such as DB-25 pin male, Centronics, and PS/2.

Win32_PortResource: Represents an I/O port on a computer system running Windows.

Win32_POTSModem: Represents the services and characteristics of a Plain Old Telephone Service (POTS) modem on a computer system running Windows.

Win32_POTSModemToSerialPort: Relates a modem and the serial port the modem uses.

Win32_PowerManagementEvent: Represents power management events resulting from power state changes.

Win32_Printer: Represents a device connected to a computer system running Windows that is capable of reproducing a visual image on a medium.

Win32_PrinterConfiguration: Defines the configuration for a printer device.

Win32_PrinterController: Relates a printer and the local device to which the printer is connected.

Win32_PrinterDriver: Represents the drivers for a Win32_Printer instance.

Win32_PrinterDriverDll: Relates a local printer and its driver file (not the driver itself).

Win32_PrinterSetting: Relates a printer and its configuration settings.

Win32_PrinterShare: Relates a local printer and the share that represents it as it is viewed over a network.

Win32_PrintJob: Represents a print job generated by a Windows-based application.

Win32_PrivilegesStatus: Represents information about the privileges required to complete an operation.

Win32_Process: Represents a sequence of events on a computer system running Windows.

Win32_Processor: Represents a device capable of interpreting a sequence of machine instructions on a computer system running Windows.

Win32_ProcessStartTrace: Indicates that a new process has started.

Win32_ProcessStartup: Represents the startup configuration of a computer system running Windows.

Win32_ProcessStopTrace: Indicates that a process has terminated.

Win32_ProcessTrace: Base event for process events.

Win32_ProgramGroupContents: Relates a program group order and an individual program group or item contained in it.

Win32_ProgramGroupOrItem: Represents a logical grouping of programs on the user's Start|Programs menu.

Win32_ProtocolBinding: Relates a system-level driver, network protocol, and network adapter.

Win32_Proxy: Contains properties and methods to query and configure an Internet connection related to WPA.

Win32_QuickFixEngineering: Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.

Win32_QuotaSetting: Contains setting information for disk quotas on a volume.

Win32_Refrigeration: Represents the properties of a refrigeration device.

Win32_Registry: Represents the system registry on a computer system running Windows.

Win32_ScheduledJob: Represents a job scheduled using the Windows schedule service.

Win32_SCSIController: Represents a small computer system interface (SCSI) controller on a computer system running Windows.

Win32_SCSIControllerDevice: Relates a SCSI controller and the logical device (disk drive) connected to it.

Win32_SecurityDescriptor: Represents a structural representation of a SECURITY_DESCRIPTOR.

Win32_SecuritySetting: Represents security settings for a managed element.

Win32_SecuritySettingAccess: Represents the rights granted and denied to a trustee for a given object.

Win32_SecuritySettingAuditing: Represents the auditing for a given trustee on a given object.

Win32_SecuritySettingGroup: Relates the security of an object and its group.

Win32_SecuritySettingOfLogicalFile: Represents security settings of a file or directory object.

Win32_SecuritySettingOfLogicalShare: Represents security settings of a shared object.

Win32_SecuritySettingOfObject: Relates an object to its security settings.

Win32_SecuritySettingOwner: Relates the security settings of an object and its owner.

Win32_SerialPort: Represents a serial port on a computer system running Windows.

Win32_SerialPortConfiguration: Represents the settings for data transmission on a Windows serial port.

Win32_SerialPortSetting: Relates a serial port and its configuration settings.

Win32_ServerConnection: Represents the connections made from a remote computer to a shared resource on the local computer.

Win32_ServerSession: Represents the sessions that are established with the local computer by users on a remote computer.

Win32_Service: Represents a service on a computer system running Windows.

Win32_SessionConnection: Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.

Win32_SessionProcess: Represents an association between a logon session and the processes associated with that session.

Win32_ShadowBy: Represents the association between a shadow copy and the provider that creates the shadow copy.

Win32_ShadowContext: Specifies how a shadow copy is to be created, queried, or deleted.

Win32_ShadowCopy: Represents a duplicate copy of the original volume at a previous time.

Win32_ShadowDiffVolumeSupport: Represents an association between a shadow copy provider and a storage volume.

Win32_ShadowFor: Represents an association between a shadow copy and the volume for which the shadow copy is created.

Win32_ShadowOn: Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowProvider: Represents a component that creates and represents volume shadow copies.

Win32_ShadowStorage: Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowVolumeSupport: Represents an association between a shadow copy provider with a supported volume.

Win32_Share: Represents a shared resource on a computer system running Windows.

Win32_ShareToDirectory: Relates a shared resource on the computer system and the directory to which it is mapped.

Win32_ShortcutFile: Represents files that are shortcuts to other files, directories, and commands.

Win32_SID: Represents an arbitrary SID.

Win32_SIDandAttributes: Represents a security identifier (SID) and its attributes.

Win32_SMBIOSMemory: Represents the capabilities and management of memory-related logical devices.

Win32_SoundDevice: Represents the properties of a sound device on a computer system running Windows.

Win32_StartupCommand: Represents a command that runs automatically when a user logs onto the computer system.

Win32_SubDirectory: Relates a directory (folder) and one of its subdirectories (subfolders).

Win32_SystemAccount: Represents a system account.

Win32_SystemBIOS: Relates a computer system (including data such as startup properties, time zones, boot configurations, or administrative passwords) and a system BIOS (services, languages, and system management properties).

Win32_SystemBootConfiguration: Relates a computer system and its boot configuration.

Win32_SystemConfigurationChangeEvent: Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).

Win32_SystemDesktop: Relates a computer system and its desktop configuration.

Win32_SystemDevices: Relates a computer system and a logical device installed on that system.

Win32_SystemDriver: Represents the system driver for a base service.

Win32_SystemDriverPNPEntity: Relates a Plug and Play device on the Windows computer system and the driver that supports the Plug and Play device.

Win32_SystemEnclosure: Represents the properties associated with a physical system enclosure.

Win32_SystemLoadOrderGroups: Relates a computer system and a load order group.

Win32_SystemMemoryResource: Represents a system memory resource on a Windows system.

Win32_SystemNetworkConnections: Relates a network connection and the computer system on which it resides.

Win32_SystemOperatingSystem: Relates a computer system and its operating system.

Win32_SystemPartitions: Relates a computer system and a disk partition on that system.

Win32_SystemProcesses: Relates a computer system and a process running on that system.

Win32_SystemProgramGroups: Relates a computer system and a logical program group.

Win32_SystemResources: Relates a system resource and the computer system it resides on.

Win32_SystemServices: Relates a computer system and a service program that exists on the system.

Win32_SystemSetting: Relates a computer system and a general setting on that system.

Win32_SystemSlot: Represents physical connection points including ports, motherboard slots and peripherals, and proprietary connections points.

Win32_SystemSystemDriver: Relates a computer system and a system driver running on that computer system.

Win32_SystemTimeZone: Relates a computer system and a time zone.

Win32_SystemTrace: Base class for all system trace events, including module, process, and thread traces.

Win32_SystemUsers: Relates a computer system and a user account on that system.

Win32_TapeDrive: Represents a tape drive on a computer system running Windows.

Win32_TCPIPPrinterPort: Represents a TCP/IP service access point.

Win32_TemperatureProbe: Represents the properties of a temperature sensor (electronic thermometer).

Win32_Thread: Represents a thread of execution.

Win32_ThreadStartTrace: Indicates a new thread has started.

Win32_ThreadStopTrace: Indicates that a thread has stopped.

Win32_ThreadTrace: Base event class for thread events.

Win32_TimeZone: Represents the time zone information for a computer system running Windows.

Win32_TokenGroups: Represents information about the group SIDs in an access token.

Win32_TokenPrivileges: Represents information about a set of privileges for an access token.

Win32_Trustee: Represents a trustee.

Win32_USBController: Manages the capabilities of a universal serial bus (USB) controller.

Win32_USBControllerDevice: Relates a USB controller and the CIM_LogicalDevice instances connected to it.

Win32_USBHub: Represents the management characteristics of a USB hub.

Win32_UserAccount: Represents information about a user account on a computer system running Windows.

Win32_UserDesktop: Relates a user account and the desktop settings that are specific to it.

Win32_UserInDomain: Relates a user account and a Windows NT domain.

Win32_UTCTime: Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.

Win32_VideoController: Represents the capabilities and management capacity of the video controller on a computer system running Windows.

Win32_VideoSettings: Relates a video controller and video settings that can be applied to it.

Win32_VoltageProbe: Represents the properties of a voltage sensor (electronic voltmeter).

Win32_Volume: Represents an area of storage on a hard disk.

Win32_VolumeChangeEvent: Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.

Win32_VolumeQuota: Relates a volume to the per volume quota settings.

Win32_VolumeQuotaSetting: Relates disk quota settings with a specific disk volume.

Win32_VolumeUserQuota: Relates per user quotas to quota-enabled volumes.

Win32_VolumeUserQuota: Represents a volume to the per volume quota settings.

Win32_WindowsProductActivation: Contains properties and methods related to WPA.

Win32_WMIElementSetting: Association between a service running in the Windows system, and the WMI settings it can use.

Win32_WMISetting: Contains the operational parameters for the WMI service.

Hardware PowerShell

Informationen über das Basic Input/Output System (BIOS)

(No Ratings Yet)

#Informationen über das Basic Input/Output System (BIOS)
Get-Wmiobject win32_bios | Select-Object Name,Version

1 2	#Informationen über das Basic Input/Output System (BIOS) Get-Wmiobject win32_bios \| Select-Object Name,Version

Radio

Quick start guide (RTL-SDR software defined radio)

(No Ratings Yet)

This link is a guide aimed at helping anyone set up a cheap radio scanner based on the RTL-SDR software […]

PowerShell Security

Windows Post Exploitation Cmdlets Execution (PowerShell)

(5 votes, average: 5.00 out of 5)

Presence This section focuses on information gathering about the victim host and the network that it’s attached to. System

#Shows all current environmental variables
$env:ALLUSERSPROFILE
$env:APPDATA
$env:CommonProgramFiles
${env:CommonProgramFiles(x86)}
$env:CommonProgramW6432
$env:COMPUTERNAME
$env:ComSpec
$env:FP_NO_HOST_CHECK
$env:HOMEDRIVE
$env:HOMEPATH
$env:LOCALAPPDATA
$env:LOGONSERVER
$env:NUMBER_OF_PROCESSORS
$env:OS
$env:Path
$env:PATHEXT
$env:PROCESSOR_ARCHITECTURE
$env:PROCESSOR_IDENTIFIER
$env:PROCESSOR_LEVEL
$env:PROCESSOR_REVISION
$env:ProgramData
$env:ProgramFiles
${env:ProgramFiles(x86)}
$env:ProgramW6432
$env:PSModulePath
$env:PUBLIC
$env:SESSIONNAME
$env:SystemRoot
$env:TEMP
$env:TMP
$env:USERDOMAIN
$env:USERDOMAIN_ROAMINGPROFILE
$env:USERNAME
$env:USERPROFILE
$env:SystemDrive
$env:windir

#Shows all current environmental variables (macOS)
$env:_ 
$env:LOGNAME
$env:SHLVL
$env:TERM_SESSION_ID
$env:PATHEXT
$env:__CF_USER_TEXT_ENCODING
$env:PATH
$env:SSH_AUTH_SOCK
$env:TMPDIR
$env:Apple_PubSub_Socket_Render
$env:PSMODULEPATH
$env:TERM
$env:USER
$env:HOME
$env:PWD
$env:TERM_PROGRAM
$env:XPC_FLAGS
$env:LC_CTYPE
$env:SHELL
$env:TERM_PROGRAM_VERSION
$env:XPC_SERVICE_NAME

#Information about disk
Get-Disk

#Retrieving Process Information
Get-Process | Select-Object Name,Path,Company,CPU,Product,TotalProcessorTime,StartTime

#Lists running threads for a specified process
(Get-Process chrome | Select-Object Threads).Threads
Get-Process | select -expand Threads

#Last Boot Uptime
Get-CimInstance -ClassName win32_operatingsystem | select csname, lastbootuptime

#Lists the current drivers on the system
Get-Process -Module

#Events and event logs on the local and remote
Get-EventLog -LogName System -EntryType Error, Warning
Get-EventLog -LogName System -EntryType Error, Warning -ComputerName $computer

#Shows all current environmental variables

$env:ALLUSERSPROFILE

$env:APPDATA

$env:CommonProgramFiles

${env:CommonProgramFiles(x86)}

$env:CommonProgramW6432

$env:COMPUTERNAME

$env:ComSpec

$env:FP_NO_HOST_CHECK

$env:HOMEDRIVE

$env:HOMEPATH

$env:LOCALAPPDATA

$env:LOGONSERVER

$env:NUMBER_OF_PROCESSORS

$env:OS

$env:Path

$env:PATHEXT

$env:PROCESSOR_ARCHITECTURE

$env:PROCESSOR_IDENTIFIER

$env:PROCESSOR_LEVEL

$env:PROCESSOR_REVISION

$env:ProgramData

$env:ProgramFiles

${env:ProgramFiles(x86)}

$env:ProgramW6432

$env:PSModulePath

$env:PUBLIC

$env:SESSIONNAME

$env:SystemRoot

$env:TEMP

$env:TMP

$env:USERDOMAIN

$env:USERDOMAIN_ROAMINGPROFILE

$env:USERNAME

$env:USERPROFILE

$env:SystemDrive

$env:windir

#Shows all current environmental variables (macOS)

$env:_

$env:LOGNAME

$env:SHLVL

$env:TERM_SESSION_ID

$env:PATHEXT

$env:__CF_USER_TEXT_ENCODING

$env:PATH

$env:SSH_AUTH_SOCK

$env:TMPDIR

$env:Apple_PubSub_Socket_Render

$env:PSMODULEPATH

$env:TERM

$env:USER

$env:HOME

$env:PWD

$env:TERM_PROGRAM

$env:XPC_FLAGS

$env:LC_CTYPE

$env:SHELL

$env:TERM_PROGRAM_VERSION

$env:XPC_SERVICE_NAME

#Information about disk

Get-Disk

#Retrieving Process Information

Get-Process | Select-Object Name,Path,Company,CPU,Product,TotalProcessorTime,StartTime

#Lists running threads for a specified process

(Get-Process chrome | Select-Object Threads).Threads

Get-Process | select -expand Threads

#Last Boot Uptime

Get-CimInstance -ClassName win32_operatingsystem | select csname, lastbootuptime

#Lists the current drivers on the system

Get-Process -Module

#Events and event logs on the local and remote

Get-EventLog -LogName System -EntryType Error, Warning

Get-EventLog -LogName System -EntryType Error, Warning -ComputerName $computer

[…]

Android

ADB (Android Debug Bridge)

(No Ratings Yet)

Android Debug Bridge (adb) is a versatile command line tool that lets you communicate with an emulator instance or connected […]

Automation Network PowerShell Security

Ver la tabla de asignaciones DHCP en un router ZyXEL

(1 votes, average: 5.00 out of 5)

$user="admin"
$pass="admin123"
$pair="${user}:${pass}"
$bytes=[System.Text.Encoding]::ASCII.GetBytes($pair)
$base64=[System.Convert]::ToBase64String($bytes)
$basicAuthValue="Basic $base64"
$headers=@{Authorization=$basicAuthValue}

$url='http://192.168.1.1:89/rpDHCP.html'
$result=(Invoke-WebRequest -Uri $url -Headers $headers)
($result.AllElements | Where tagName -eq “title”).outerText
$result.AllElements | Where tagName -eq “td” | %{if($_.innerText -match '192.168' -and $_.innerText -match '-'){$_.innerText}}

$user="admin"

$pass="admin123"

$pair="${user}:${pass}"

$bytes=[System.Text.Encoding]::ASCII.GetBytes($pair)

$base64=[System.Convert]::ToBase64String($bytes)

$basicAuthValue="Basic $base64"

$headers=@{Authorization=$basicAuthValue}

$url='http://192.168.1.1:89/rpDHCP.html'

$result=(Invoke-WebRequest -Uri $url -Headers $headers)

($result.AllElements | Where tagName -eq “title”).outerText

$result.AllElements | Where tagName -eq “td” | %{if($_.innerText -match '192.168' -and $_.innerText -match '-'){$_.innerText}}

Automation Network PowerShell Security

Ver la tabla de direcciones MAC asociadas a un punto de acceso

(No Ratings Yet)

$user="admin"
$pass="admin"
$pair="${user}:${pass}"
$bytes=[System.Text.Encoding]::ASCII.GetBytes($pair)
$base64=[System.Convert]::ToBase64String($bytes)
$basicAuthValue="Basic $base64"
$headers=@{Authorization=$basicAuthValue}

$url='http://192.168.1.2/wlstatbl.asp'
$result=(Invoke-WebRequest -Uri $url -Headers $headers)
($result.AllElements | Where tagName -eq “title”).outerText
$result.AllElements | Where tagName -eq “td” | %{if($_.innerText -match ':'){$_.innerText}}

$user="admin"

$pass="admin"

$pair="${user}:${pass}"

$bytes=[System.Text.Encoding]::ASCII.GetBytes($pair)

$base64=[System.Convert]::ToBase64String($bytes)

$basicAuthValue="Basic $base64"

$headers=@{Authorization=$basicAuthValue}

$url='http://192.168.1.2/wlstatbl.asp'

$result=(Invoke-WebRequest -Uri $url -Headers $headers)

($result.AllElements | Where tagName -eq “title”).outerText

$result.AllElements | Where tagName -eq “td” | %{if($_.innerText -match ':'){$_.innerText}}

Automation Network PowerShell Security

Autenticarse en un router ZyXEL mediante el usuario y la contraseña

(No Ratings Yet)

$user="admin"
$pass="admin123"
$pair="${user}:${pass}"
$bytes=[System.Text.Encoding]::ASCII.GetBytes($pair)
$base64=[System.Convert]::ToBase64String($bytes)
$basicAuthValue="Basic $base64"
$headers=@{Authorization=$basicAuthValue}

$url='http://192.168.1.1:89/rpSys.html'
$result=(Invoke-WebRequest -Uri $url -Headers $headers)
($result.AllElements | Where tagName -eq “title”).outerText

$user="admin"

$pass="admin123"

$pair="${user}:${pass}"

$bytes=[System.Text.Encoding]::ASCII.GetBytes($pair)

$base64=[System.Convert]::ToBase64String($bytes)

$basicAuthValue="Basic $base64"

$headers=@{Authorization=$basicAuthValue}

$url='http://192.168.1.1:89/rpSys.html'

$result=(Invoke-WebRequest -Uri $url -Headers $headers)

($result.AllElements | Where tagName -eq “title”).outerText

Automation Network PowerShell Security

Autenticarse en el punto de acceso mediante el usuario y la contraseña

(No Ratings Yet)

$user="admin"
$pass="1234"
$pair="${user}:${pass}"
$bytes=[System.Text.Encoding]::ASCII.GetBytes($pair)
$base64=[System.Convert]::ToBase64String($bytes)
$basicAuthValue="Basic $base64"
$headers=@{Authorization=$basicAuthValue}

$url='https://192.168.1.2/index.asp'
$result=(Invoke-WebRequest -Uri $url -Headers $headers)
($result.AllElements | Where tagName -eq “title”).outerText