Options | Scripting and security

Forkstat is a program that logs process fork(), exec() and exit() activity. It is useful for monitoring system behaviour and to track down rogue processes that are spawning off processes and potentially abusing the system. Note that forkstat uses the Linux netlink connector to gather process activity and this may miss events if the system is overly busy. Netlink connector also requires root privilege. forkstat command line options: -d strip off the directory path from the process name -D specify run duration in seconds. -e select which events to monitor. -h show brief help summary -l set stdout to line-buffered […]

Bash PowerShell

How to make an offline mirror copy of a website with WSL (Windows Subsystem for Linux)?

09/06/201809/06/2018

bash -c "wget --mirror --convert-links --html-extension --wait=2 -o log https://www.jesusninoc.com"

1	bash -c "wget --mirror --convert-links --html-extension --wait=2 -o log https://www.jesusninoc.com"

--mirror
    Turn on options suitable for mirroring. This option turns on 
    recursion and time-stamping, sets infinite recursion depth,
    and keeps FTP directory listings. It is currently equivalent to 
    ‘-r -N -l inf --no-remove-listing’. 

--convert-links
    After the download is complete, convert the links in the document
    to make them suitable for local viewing.

--html-extension

-o foo
    write "log" output to a file named "foo"

--wait=seconds
    Wait the specified number of seconds between the retrievals.
    Use of this option is recommended, as it lightens the server load 
    by making the requests less frequent.

--mirror

Turn on options suitable for mirroring. This option turns on

recursion and time-stamping, sets infinite recursion depth,

and keeps FTP directory listings. It is currently equivalent to

‘-r -N -l inf --no-remove-listing’.

--convert-links

After the download is complete, convert the links in the document

to make them suitable for local viewing.

--html-extension

-o foo

write "log" output to a file named "foo"

--wait=seconds

Wait the specified number of seconds between the retrievals.

Use of this option is recommended, as it lightens the server load

by making the requests less frequent.

C# PowerShell

Acceder al API de Windows de bajo nivel desde PowerShell: crear una ventana de mensaje con dos botones

15/05/201806/05/2018

$CodigoC = @"

using System;
using System.Diagnostics;
using System.Runtime.InteropServices;
 
public static class User32
{
    [DllImport("user32.dll", CharSet=CharSet.Auto)]
        public static extern bool MessageBox(
            IntPtr hWnd,     /// Parent window handle 
            String text,     /// Text message to display
            String caption,  /// Window caption
            int options);    /// MessageBox type
}

"@

Add-Type -TypeDefinition $CodigoC -ErrorAction SilentlyContinue

[User32]::MessageBox(0,"Texto","Título",0x4)

$CodigoC = @"

using System;

using System.Diagnostics;

using System.Runtime.InteropServices;

public static class User32

{

[DllImport("user32.dll", CharSet=CharSet.Auto)]

public static extern bool MessageBox(

IntPtr hWnd, /// Parent window handle

String text, /// Text message to display

String caption, /// Window caption

int options); /// MessageBox type

}

Add-Type -TypeDefinition $CodigoC -ErrorAction SilentlyContinue

[User32]::MessageBox(0,"Texto","Título",0x4)

C# PowerShell

Acceder al API de Windows de bajo nivel desde PowerShell: crear una ventana de mensaje (también conocida como cuadro de diálogo)

08/05/201808/05/2018

$CodigoC = @"

using System;
using System.Diagnostics;
using System.Runtime.InteropServices;
 
public static class User32
{
    [DllImport("user32.dll", CharSet=CharSet.Auto)]
        public static extern bool MessageBox(
            IntPtr hWnd,     /// Parent window handle 
            String text,     /// Text message to display
            String caption,  /// Window caption
            int options);    /// MessageBox type
}

"@

Add-Type -TypeDefinition $CodigoC -ErrorAction SilentlyContinue

[User32]::MessageBox(0,"Texto","Título",0)

$CodigoC = @"

using System;

using System.Diagnostics;

using System.Runtime.InteropServices;

public static class User32

{

[DllImport("user32.dll", CharSet=CharSet.Auto)]

public static extern bool MessageBox(

IntPtr hWnd, /// Parent window handle

String text, /// Text message to display

String caption, /// Window caption

int options); /// MessageBox type

}

Add-Type -TypeDefinition $CodigoC -ErrorAction SilentlyContinue

[User32]::MessageBox(0,"Texto","Título",0)

PHP Security

THC-Hydra 8.6

26/07/201715/04/2018

Hydra is born more than 10 years ago, this page is used as a recap of the functionalities it provides, but also the differences in feature sets, services coverage and code between the most popular network authentication cracker tools available. Each feature is compared against Hydra as of the current version. This table is updated as new features are added to the project. If you find any inaccuracies on this page please do not hesitate to contact us. [0x00] News and Changelog Check out the feature sets and services coverage page – including a speed comparison against ncrack and medusa (yes, we […]

Network

Wireshark 101: Display Filters and Filter Options, HakTip 122

15/06/201713/06/2017

Filesystem Hardware Network Users

Rundll32 commands for Windows

12/04/201702/05/2018

# Control Panel
RunDll32.exe shell32.dll,Control_RunDLL

# Delete Temporary Internet Files
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 8

# Delete Cookies
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 2

# Delete History
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 1

# Delete Form Data
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 16

# Delete Passwords
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 32

# Delete All
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 255

# Delete all files and settings stored by Add-ons
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 4351

# Date and Time Properties
RunDll32.exe shell32.dll,Control_RunDLL timedate.cpl

# Device Manager
RunDll32.exe devmgr.dll DeviceManager_Execute

# Folder Options – General
RunDll32.exe shell32.dll,Options_RunDLL 0

# Folder Options – Search
RunDll32.exe shell32.dll,Options_RunDLL 2

# Folder Options – View
RunDll32.exe shell32.dll,Options_RunDLL 7

# Hibernate
RunDll32.exe powrprof.dll,SetSuspendState

# Keyboard Properties
RunDll32.exe shell32.dll,Control_RunDLL main.cpl @1

# Lock Screen
RunDll32.exe user32.dll,LockWorkStation

# Mouse Button – Swap left button to function as right
Rundll32 User32.dll,SwapMouseButton

# Map Network Drive Wizard
Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL Connect

# Network Connections
RunDll32.exe shell32.dll,Control_RunDLL ncpa.cpl

# Organize IE Favourites
Rundll32.exe shdocvw.dll,DoOrganizeFavDlg

# Open With Dialog Box
Rundll32 Shell32.dll,OpenAs_RunDLL File.ext

# Plays a waveform sound
rundll32.exe user32.dll,MessageBeep

# Printer User Interface
Rundll32 Printui.dll,PrintUIEntry

# Printer Management Folder.
Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL PrintersFolder

# Power Options
RunDll32.exe Shell32.dll,Control_RunDLL powercfg.cpl

# Stored Usernames and Passwords
RunDll32.exe keymgr.dll,KRShowKeyMgr

# Safely Remove Hardware Dialog Box
Rundll32 Shell32.dll,Control_RunDLL HotPlug.dll

# Taskbar Properties
RunDll32.exe shell32.dll,Options_RunDLL 1

# User Accounts
RunDll32.exe shell32.dll,Control_RunDLL nusrmgr.cpl

# Windows Security Center
RunDll32.exe shell32.dll,Control_RunDLL wscui.cpl

# Windows Fonts Installation Folder
Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL FontsFolder

# Windows Firewall
RunDll32.exe shell32.dll,Control_RunDLL firewall.cpl

# Abrir la calculadora
rundll32 zipfldr.dll, RouteTheCall calc.exe
rundll32 advpack.dll, RegisterOCX calc.exe
rundll32 c:\Windows\System32\pcwutl.dll,LaunchApplication calc.exe

# You looking out for that "RegisterOCX" function in IEAdvpack.dll?  
rundll32.exe C:\windows\system32\IEAdvpack.dll,RegisterOCX C:\path\to\payload.dll
rundll32.exe C:\windows\system32\IEAdvpack.dll,RegisterOCX C:\path\to\payload.exe
rundll32.exe IEAdvpack.dll,RegisterOCX calc.exe

# Llame al Asistente de conexión de la unidad de red
rundll32.exe shell32.dll, SHHelpShortcuts_RunDLL Connect

# Abra un cuadro de diálogo que muestra la versión del sistema operativo Windows. También puede mostrar este cuadro de diálogo ejecutando el comando winver.exe
rundll32.exe shell32.dll, ShellAboutA

# Muestra el árbol del sistema de archivos del disco duro de la computadora
rundll32.exe IEAKENG.dll, BrowseForFileA

# Llame al cuadro de diálogo AYUDA Y SOPORTE en la página especificada. Por ejemplo, puede usar la llamada mshelp como la página html: // Windows /? Id = 33307acf-0698-41ba-b014-ea0a2eb8d0a8
rundll32.exe ndfapi.dll, NdfRunDllHelpTopic "html-page"

# Llame al diálogo ABRIR COMO ... para abrir este archivo
rundll32.exe shell32.dll, OpenAs_RunDLL "ruta y nombre de archivo"

# Muestra el cuadro de diálogo de la utilidad de red del cliente de SQL Server
rundll32.exe shell32.dll, Control_RunDLL Cliconfg.dll

# Muestra el cuadro de diálogo Eliminar dispositivo
rundll32.exe shell32.dll, Control_RunDLL Hotplug.dll

# Reescribe el contenido de este archivo
rundll32.exe admparse.dll, CheckDuplicateKeysA "ruta y nombre de archivo"

# Crea una carpeta. Si esta carpeta ya existe, se borrarán todos sus contenidos
rundll32.exe IEAKENG.dll, BToolbar_SaveA "ruta a la carpeta"

# Inicia el navegador de Internet Explorer y descarga la página http://g.msn.com/WMHFUSEN/101724
rundll32.exe appwiz.cpl, GetProgramsOnline

# Ejecuta el comando
rundll32.exe shell32.dll, ShellExec_RunDLL "comando"

# Abra la carpeta. Si no especifica una carpeta, se abrirá la carpeta de su perfil
rundll32.exe url.dll, FileProtocolHandler "directorio"

# Elimina todos los archivos de la carpeta especificada que tienen el atributo FILEATTRIBUTETAGINFORMATION
rundll32.exe WININET.dll, RunOnceUrlCache "ruta a la carpeta"

# Ejecute el archivo xml
rundll32.exe xwizards.dll, ProcessXMLFile "ruta y nombre del archivo xml"

# Presiona el botón derecho del mouse
rundll32.exe user32.dll, mouse_event

# Coloque el cursor en la esquina inferior derecha de la pantalla
rundll32.exe user32.dll, SetCursorPos

# Detener el servicio de actualización en segundo plano dfsvc.exe
rundll32.exe dfshim.dll, KillService

# Ejecuta los comandos descritos en la rama de registro HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunOnceEx (o en la rama de la partición raíz HKCU)
rundll32.exe IERNONCE.dll, RunOnceExProcess

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

# Control Panel

RunDll32.exe shell32.dll,Control_RunDLL

# Delete Temporary Internet Files

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 8

# Delete Cookies

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 2

# Delete History

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 1

# Delete Form Data

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 16

# Delete Passwords

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 32

# Delete All

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 255

# Delete all files and settings stored by Add-ons

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 4351

# Date and Time Properties

RunDll32.exe shell32.dll,Control_RunDLL timedate.cpl

# Device Manager

RunDll32.exe devmgr.dll DeviceManager_Execute

# Folder Options – General

RunDll32.exe shell32.dll,Options_RunDLL 0

# Folder Options – Search

RunDll32.exe shell32.dll,Options_RunDLL 2

# Folder Options – View

RunDll32.exe shell32.dll,Options_RunDLL 7

# Hibernate

RunDll32.exe powrprof.dll,SetSuspendState

# Keyboard Properties

RunDll32.exe shell32.dll,Control_RunDLL main.cpl @1

# Lock Screen

RunDll32.exe user32.dll,LockWorkStation

# Mouse Button – Swap left button to function as right

Rundll32 User32.dll,SwapMouseButton

# Map Network Drive Wizard

Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL Connect

# Network Connections

RunDll32.exe shell32.dll,Control_RunDLL ncpa.cpl

# Organize IE Favourites

Rundll32.exe shdocvw.dll,DoOrganizeFavDlg

# Open With Dialog Box

Rundll32 Shell32.dll,OpenAs_RunDLL File.ext

# Plays a waveform sound

rundll32.exe user32.dll,MessageBeep

# Printer User Interface

Rundll32 Printui.dll,PrintUIEntry

# Printer Management Folder.

Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL PrintersFolder

# Power Options

RunDll32.exe Shell32.dll,Control_RunDLL powercfg.cpl

# Stored Usernames and Passwords

RunDll32.exe keymgr.dll,KRShowKeyMgr

# Safely Remove Hardware Dialog Box

Rundll32 Shell32.dll,Control_RunDLL HotPlug.dll

# Taskbar Properties

RunDll32.exe shell32.dll,Options_RunDLL 1

# User Accounts

RunDll32.exe shell32.dll,Control_RunDLL nusrmgr.cpl

# Windows Security Center

RunDll32.exe shell32.dll,Control_RunDLL wscui.cpl

# Windows Fonts Installation Folder

Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL FontsFolder

# Windows Firewall

RunDll32.exe shell32.dll,Control_RunDLL firewall.cpl

# Abrir la calculadora

rundll32 zipfldr.dll, RouteTheCall calc.exe

rundll32 advpack.dll, RegisterOCX calc.exe

rundll32 c:\Windows\System32\pcwutl.dll,LaunchApplication calc.exe

# You looking out for that "RegisterOCX" function in IEAdvpack.dll?

rundll32.exe C:\windows\system32\IEAdvpack.dll,RegisterOCX C:\path\to\payload.dll

rundll32.exe C:\windows\system32\IEAdvpack.dll,RegisterOCX C:\path\to\payload.exe

rundll32.exe IEAdvpack.dll,RegisterOCX calc.exe

# Llame al Asistente de conexión de la unidad de red

rundll32.exe shell32.dll, SHHelpShortcuts_RunDLL Connect

# Abra un cuadro de diálogo que muestra la versión del sistema operativo Windows. También puede mostrar este cuadro de diálogo ejecutando el comando winver.exe

rundll32.exe shell32.dll, ShellAboutA

# Muestra el árbol del sistema de archivos del disco duro de la computadora

rundll32.exe IEAKENG.dll, BrowseForFileA

# Llame al cuadro de diálogo AYUDA Y SOPORTE en la página especificada. Por ejemplo, puede usar la llamada mshelp como la página html: // Windows /? Id = 33307acf-0698-41ba-b014-ea0a2eb8d0a8

rundll32.exe ndfapi.dll, NdfRunDllHelpTopic "html-page"

# Llame al diálogo ABRIR COMO ... para abrir este archivo

rundll32.exe shell32.dll, OpenAs_RunDLL "ruta y nombre de archivo"

# Muestra el cuadro de diálogo de la utilidad de red del cliente de SQL Server

rundll32.exe shell32.dll, Control_RunDLL Cliconfg.dll

# Muestra el cuadro de diálogo Eliminar dispositivo

rundll32.exe shell32.dll, Control_RunDLL Hotplug.dll

# Reescribe el contenido de este archivo

rundll32.exe admparse.dll, CheckDuplicateKeysA "ruta y nombre de archivo"

# Crea una carpeta. Si esta carpeta ya existe, se borrarán todos sus contenidos

rundll32.exe IEAKENG.dll, BToolbar_SaveA "ruta a la carpeta"

# Inicia el navegador de Internet Explorer y descarga la página http://g.msn.com/WMHFUSEN/101724

rundll32.exe appwiz.cpl, GetProgramsOnline

# Ejecuta el comando

rundll32.exe shell32.dll, ShellExec_RunDLL "comando"

# Abra la carpeta. Si no especifica una carpeta, se abrirá la carpeta de su perfil

rundll32.exe url.dll, FileProtocolHandler "directorio"

# Elimina todos los archivos de la carpeta especificada que tienen el atributo FILEATTRIBUTETAGINFORMATION

rundll32.exe WININET.dll, RunOnceUrlCache "ruta a la carpeta"

# Ejecute el archivo xml

rundll32.exe xwizards.dll, ProcessXMLFile "ruta y nombre del archivo xml"

# Presiona el botón derecho del mouse

rundll32.exe user32.dll, mouse_event

# Coloque el cursor en la esquina inferior derecha de la pantalla

rundll32.exe user32.dll, SetCursorPos

# Detener el servicio de actualización en segundo plano dfsvc.exe

rundll32.exe dfshim.dll, KillService

# Ejecuta los comandos descritos en la rama de registro HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunOnceEx (o en la rama de la partición raíz HKCU)

rundll32.exe IERNONCE.dll, RunOnceExProcess

PowerShell Web

Métodos que se pueden utilizar en solicitudes web en PowerShell

19/01/201719/02/2017

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Default
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Delete
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Get
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Head
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Merge
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Options
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Patch
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Post
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Put
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Trace

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Default

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Delete

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Get

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Head

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Merge

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Options

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Patch

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Post

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Put

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Trace

Filesystem Hardware Network Processes

WMI Classes (detailed)

13/01/201702/09/2017

Class: Description 
Win32_1394Controller: Represents the capabilities and management of a 1394 controller.
Win32_1394ControllerDevice: Relates the high-speed serial bus (IEEE 1394 Firewire) Controller and the CIM_LogicalDevice instance connected to it.
Win32_Account: Represents information about user accounts and group accounts known to the computer system running Windows.
Win32_AccountSID: Relates a security account instance with a security descriptor instance.
Win32_ACE: Represents an access control entry (ACE).
Win32_ActiveRoute: Relates the current IP4 route to the persisted IP route table.
Win32_AllocatedResource: Relates a logical device to a system resource.
Win32_AssociatedProcessorMemory: Relates a processor and its cache memory.
Win32_AutochkSetting: Represents the settings for the autocheck operation of a disk.
Win32_BaseBoard: Represents a baseboard (also known as a motherboard or system board).
Win32_BaseService: Represents executable objects that are installed in a registry database maintained by the Service Control Manager.
Win32_Battery: Represents a battery connected to the computer system.
Win32_BIOS: Represents the attributes of the computer system's basic input or output services (BIOS) that are installed on the computer.
Win32_BootConfiguration: Represents the boot configuration of a computer system running Windows.
Win32_Bus: Represents a physical bus as seen by a Windows operating system.
Win32_CacheMemory: Represents cache memory (internal and external) on a computer system.
Win32_CDROMDrive: Represents a CD-ROM drive on a computer system running Windows.
Win32_CIMLogicalDeviceCIMDataFile: Relates logical devices and data files, indicating the driver files used by the device.
Win32_ClassicCOMApplicationClasses: Relates a DCOM application and a COM component grouped under it.
Win32_ClassicCOMClass: Represents the properties of a COM component.
Win32_ClassicCOMClassSettings: Relates a COM class and the settings used to configure instances of the COM class.
Win32_ClientApplicationSetting: Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.
Win32_CollectionStatistics: Relates a managed system element collection and the class representing statistical information about the collection.
Win32_COMApplication: Represents a COM application.
Win32_COMApplicationClasses: Relates a COM component and the COM application where it resides.
Win32_COMApplicationSettings: Relates a DCOM application and its configuration settings.
Win32_COMClass: Represents the properties of a COM component.
Win32_ComClassAutoEmulator: Relates a COM class and another COM class that it automatically emulates.
Win32_ComClassEmulator: Relates two versions of a COM class.
Win32_ComponentCategory: Represents a component category.
Win32_ComputerShutdownEvent: Represents computer shutdown events.
Win32_ComputerSystem: Represents a computer system operating in a Windows environment.
Win32_ComputerSystemEvent: Represents events related to a computer system.
Win32_ComputerSystemProcessor: Relates a computer system and a processor running on that system.
Win32_ComputerSystemProduct: Represents a product.
Win32_ComputerSystemWindowsProductActivationSetting: Relates instances of Win32_ComputerSystem andWin32_WindowsProductActivation.
Win32_COMSetting: Represents the settings associated with a COM component or COM application.
Win32_ConnectionShare: Relates a shared resource on the computer and the connection made to the shared resource.
Win32_ControllerHasHub: Represents the hubs downstream from the universal serial bus (USB) controller.
Win32_CurrentProbe: Represents the properties of a current monitoring sensor (ammeter).
Win32_CurrentTime: Represents an instance in time as component seconds, minutes, day of the week, and so on.
Win32_DCOMApplication: Represents the properties of a DCOM application.
Win32_DCOMApplicationAccessAllowedSetting: Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.
Win32_DCOMApplicationLaunchAllowedSetting: Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.
Win32_DCOMApplicationSetting: Represents the settings of a DCOM application.
Win32_DependentService: Relates two interdependent base services.
Win32_Desktop: Represents the common characteristics of a user's desktop.
Win32_DesktopMonitor: Represents the type of monitor or display device attached to the computer system.
Win32_DeviceBus: Relates a system bus and a logical device using the bus.
Win32_DeviceChangeEvent: Represents device change events resulting from the addition, removal, or modification of devices on the computer system.
Win32_DeviceMemoryAddress: Represents a device memory address on a Windows system.
Win32_DeviceSettings: Relates a logical device and a setting that can be applied to it.
Win32_DFSNode: Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).
Win32_DFSNodeTarget: Represents the relationship of a DFS node to one of its targets.
Win32_DFSTarget: Represents the target of a DFS node.
Win32_Directory: Represents a directory entry on a computer system running Windows.
Win32_DirectorySpecification: Represents the directory layout for the product.
Win32_DiskDrive: Represents a physical disk drive as seen by a computer running the Windows operating system.
Win32_DiskDriveToDiskPartition: Relates a disk drive and a partition existing on it.
Win32_DiskPartition: Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.
Win32_DiskQuota: Tracks disk space usage for NTFS file system volumes.
Win32_DisplayControllerConfiguration: Represents the video adapter configuration information of a computer system running Windows. This class is obsolete. In place of this class, use the properties in the Win32_VideoController, Win32_DesktopMonitor, and CIM_VideoControllerResolution classes.
Win32_DMAChannel: Represents a direct memory access (DMA) channel on a computer system running Windows.
Win32_DriverForDevice: Relates a printer to a printer driver.
Win32_Environment: Represents an environment or system environment setting on a computer system running Windows.
Win32_Fan: Represents the properties of a fan device in the computer system.
Win32_FloppyController: Represents the capabilities and management capacity of a floppy disk drive controller.
Win32_FloppyDrive: Manages the capabilities of a floppy disk drive.
Win32_Group: Represents data about a group account.
Win32_GroupInDomain: Identifies the group accounts associated with a Windows NT domain.
Win32_GroupUser: Relates a group and an account that is a member of that group.
Win32_HeatPipe: Represents the properties of a heat pipe cooling device.
Win32_IDEController: Represents the capabilities of an Integrated Drive Electronics (IDE) controller device.
Win32_IDEControllerDevice: Association class that relates an IDE controller and the logical device.
Win32_ImplementedCategory: Relates a component category and the COM class using its interfaces.
Win32_InfraredDevice: Represents the capabilities and management of an infrared device.
Win32_IP4PersistedRouteTable: Represents persisted IP routes.
Win32_IP4RouteTable: Represents information that governs the routing of network data packets.
Win32_IP4RouteTableEvent: Represents IP route change events.
Win32_IRQResource: Represents an interrupt request line (IRQ) number on a Windows computer system.
Win32_Keyboard: Represents a keyboard installed on a computer system running Windows.
Win32_LoadOrderGroup: Represents a group of system services that define execution dependencies.
Win32_LoadOrderGroupServiceDependencies: Represents an association between a base service and a load order group that the service depends on to start running.
Win32_LoadOrderGroupServiceMembers: Relates a load order group and a base service.
Win32_LocalTime: Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.
Win32_LogicalDisk: Represents a data source that resolves to an actual local storage device on a computer system running Windows.
Win32_LogicalDiskRootDirectory: Relates a logical disk and its directory structure.
Win32_LogicalDiskToPartition: Relates a logical disk drive and the disk partition it resides on.
Win32_LogicalFileAccess: Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).
Win32_LogicalFileAuditing: Relates the security settings of a file or directory one member of its system access control list (SACL).
Win32_LogicalFileGroup: Relates the security settings of a file or directory and its group.
Win32_LogicalFileOwner: Relates the security settings of a file or directory and its owner.
Win32_LogicalFileSecuritySetting: Represents security settings for a logical file.
Win32_LogicalProgramGroup: Represents a program group in a computer system running Windows.
Win32_LogicalProgramGroupDirectory: Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.
Win32_LogicalProgramGroupItem: Represents an element contained by a Win32_ProgramGroup instance, that is not itself anotherWin32_ProgramGroup instance.
Win32_LogicalProgramGroupItemDataFile: Relates the program group items of the Start menu, and the files in which they are stored.
Win32_LogicalShareAccess: Relates the security settings of a share and one member of its DACL.
Win32_LogicalShareAuditing: Relates the security settings of a share and one member of its SACL.
Win32_LogicalShareSecuritySetting: Represents security settings for a logical file.
Win32_LogonSession: Describes the logon session or sessions associated with a user logged on to Windows.
Win32_LogonSessionMappedDisk: Represents the mapped logical disks associated with the session.
Win32_LUID: Represents a locally unique identifier (LUID)
Win32_LUIDandAttributes: Represents a LUID and its attributes.
Win32_MappedLogicalDisk: Represents network storage devices that are mapped as logical disks on the computer system running Windows.
Win32_MemoryArray: Represents the properties of the computer system memory array and mapped addresses.
Win32_MemoryArrayLocation: Relates a logical memory array and the physical memory array upon which it exists.
Win32_MemoryDevice: Represents the properties of a computer system's memory device along with its associated mapped addresses.
Win32_MemoryDeviceArray: Relates a memory device and the memory array in which it resides.
Win32_MemoryDeviceLocation: Association class that relates a memory device and the physical memory on which it exists.
Win32_MethodParameterClass: Abstract, base class that implements method parameters derived from this class.
Win32_ModuleLoadTrace: Indicates that a process has loaded a new module.
Win32_ModuleTrace: Base event for module events.
Win32_MotherboardDevice: Represents a device that contains the central components of the computer system running Windows.
Win32_NamedJobObject: Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.
Win32_NamedJobObjectActgInfo: Represents the I/O accounting information for a job object.
Win32_NamedJobObjectLimit: Represents an association between a job object and the job object limit settings.
Win32_NamedJobObjectLimitSetting: Represents the limit settings for a job object.
Win32_NamedJobObjectProcess: Relates a job object and the process contained in the job object.
Win32_NamedJobObjectSecLimit: Relates a job object and the job object security limit settings.
Win32_NamedJobObjectSecLimitSetting: Represents the security limit settings for a job object.
Win32_NamedJobObjectStatistics: Represents an association between a job object and the job object I/O accounting information class.
Win32_NetworkAdapter: Represents a network adapter on a computer system running Windows.
Win32_NetworkAdapterConfiguration: Represents the attributes and behaviors of a network adapter. The class is not guaranteed to be supported after the ratification of the Distributed Management Task Force (DMTF) CIM network specification.
Win32_NetworkAdapterSetting: Relates a network adapter and its configuration settings.
Win32_NetworkClient: Represents a network client on a computer system running Windows.
Win32_NetworkConnection: Represents an active network connection in a Windows environment.
Win32_NetworkLoginProfile: Represents the network login information of a specific user on a computer system running Windows.
Win32_NetworkProtocol: Represents a protocol and its network characteristics on a computer system running Windows.
Win32_NTDomain: Represents a Windows NT domain.
Win32_NTEventlogFile: Represents data stored in a Windows Event log file.
Win32_NTLogEvent: Represents Windows events.
Win32_NTLogEventComputer: Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.
Win32_NTLogEventLog: Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.
Win32_NTLogEventUser: Relates instances of Win32_NTLogEvent and Win32_UserAccount.
Win32_OnBoardDevice: Represents common adapter devices built into the motherboard (system board).
Win32_OperatingSystem: Represents an operating system installed on a computer system running Windows.
Win32_OperatingSystemAutochkSetting: Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.
Win32_OperatingSystemQFE: Relates an operating system and product updates applied as represented inWin32_QuickFixEngineering.
Win32_OSRecoveryConfiguration: Represents the types of information that will be gathered from memory when the operating system fails.
Win32_PageFile: Represents the file used for handling virtual memory file swapping on a Windows system.
Win32_PageFileElementSetting: Relates the initial settings of a page file and the state of those settings during normal use.
Win32_PageFileSetting: Represents the settings of a page file.
Win32_PageFileUsage: Represents the file used for handling virtual memory file swapping on a computer system running Windows.
Win32_ParallelPort: Represents the properties of a parallel port on a computer system running Windows.
Win32_PCMCIAController: Manages the capabilities of a Personal Computer Memory Card Interface Adapter (PCMCIA) controller device.
Win32_Perf: The base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData.
Win32_PerfFormattedData: an abstract base class for the pre-installed, calculated data classes.
Win32_PerfRawData: The abstract base class for all concrete raw performance counter classes.
Win32_PhysicalMedia: Represents any type of documentation or storage medium.
Win32_PhysicalMemory: Represents a physical memory device located on a computer as available to the operating system.
Win32_PhysicalMemoryArray: Represents details about the computer system's physical memory.
Win32_PhysicalMemoryLocation: Relates an array of physical memory and its physical memory.
Win32_PingStatus: Represents the values returned by the standard ping command.
Win32_PNPAllocatedResource: Represents an association between logical devices and system resources.
Win32_PNPDevice: Relates a device (known to Configuration Manager as a PNPEntity), and the function it performs.
Win32_PNPEntity: Represents the properties of a Plug and Play device.
Win32_PointingDevice: Represents an input device used to point to and select regions on the display of a computer system running Windows.
Win32_PortableBattery: Represents the properties of a portable battery, such as one used for a notebook computer.
Win32_PortConnector: Represents physical connection ports, such as DB-25 pin male, Centronics, and PS/2.
Win32_PortResource: Represents an I/O port on a computer system running Windows.
Win32_POTSModem: Represents the services and characteristics of a Plain Old Telephone Service (POTS) modem on a computer system running Windows.
Win32_POTSModemToSerialPort: Relates a modem and the serial port the modem uses.
Win32_PowerManagementEvent: Represents power management events resulting from power state changes.
Win32_Printer: Represents a device connected to a computer system running Windows that is capable of reproducing a visual image on a medium.
Win32_PrinterConfiguration: Defines the configuration for a printer device.
Win32_PrinterController: Relates a printer and the local device to which the printer is connected.
Win32_PrinterDriver: Represents the drivers for a Win32_Printer instance.
Win32_PrinterDriverDll: Relates a local printer and its driver file (not the driver itself).
Win32_PrinterSetting: Relates a printer and its configuration settings.
Win32_PrinterShare: Relates a local printer and the share that represents it as it is viewed over a network.
Win32_PrintJob: Represents a print job generated by a Windows-based application.
Win32_PrivilegesStatus: Represents information about the privileges required to complete an operation.
Win32_Process: Represents a sequence of events on a computer system running Windows.
Win32_Processor: Represents a device capable of interpreting a sequence of machine instructions on a computer system running Windows.
Win32_ProcessStartTrace: Indicates that a new process has started.
Win32_ProcessStartup: Represents the startup configuration of a computer system running Windows.
Win32_ProcessStopTrace: Indicates that a process has terminated.
Win32_ProcessTrace: Base event for process events.
Win32_ProgramGroupContents: Relates a program group order and an individual program group or item contained in it.
Win32_ProgramGroupOrItem: Represents a logical grouping of programs on the user's Start|Programs menu.
Win32_ProtocolBinding: Relates a system-level driver, network protocol, and network adapter.
Win32_Proxy: Contains properties and methods to query and configure an Internet connection related to WPA.
Win32_QuickFixEngineering: Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.
Win32_QuotaSetting: Contains setting information for disk quotas on a volume.
Win32_Refrigeration: Represents the properties of a refrigeration device.
Win32_Registry: Represents the system registry on a computer system running Windows.
Win32_ScheduledJob: Represents a job scheduled using the Windows schedule service.
Win32_SCSIController: Represents a small computer system interface (SCSI) controller on a computer system running Windows.
Win32_SCSIControllerDevice: Relates a SCSI controller and the logical device (disk drive) connected to it.
Win32_SecurityDescriptor: Represents a structural representation of a SECURITY_DESCRIPTOR.
Win32_SecuritySetting: Represents security settings for a managed element.
Win32_SecuritySettingAccess: Represents the rights granted and denied to a trustee for a given object.
Win32_SecuritySettingAuditing: Represents the auditing for a given trustee on a given object.
Win32_SecuritySettingGroup: Relates the security of an object and its group.
Win32_SecuritySettingOfLogicalFile: Represents security settings of a file or directory object.
Win32_SecuritySettingOfLogicalShare: Represents security settings of a shared object.
Win32_SecuritySettingOfObject: Relates an object to its security settings.
Win32_SecuritySettingOwner: Relates the security settings of an object and its owner.
Win32_SerialPort: Represents a serial port on a computer system running Windows.
Win32_SerialPortConfiguration: Represents the settings for data transmission on a Windows serial port.
Win32_SerialPortSetting: Relates a serial port and its configuration settings.
Win32_ServerConnection: Represents the connections made from a remote computer to a shared resource on the local computer.
Win32_ServerSession: Represents the sessions that are established with the local computer by users on a remote computer.
Win32_Service: Represents a service on a computer system running Windows.
Win32_SessionConnection: Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.
Win32_SessionProcess: Represents an association between a logon session and the processes associated with that session.
Win32_ShadowBy: Represents the association between a shadow copy and the provider that creates the shadow copy.
Win32_ShadowContext: Specifies how a shadow copy is to be created, queried, or deleted.
Win32_ShadowCopy: Represents a duplicate copy of the original volume at a previous time.
Win32_ShadowDiffVolumeSupport: Represents an association between a shadow copy provider and a storage volume.
Win32_ShadowFor: Represents an association between a shadow copy and the volume for which the shadow copy is created.
Win32_ShadowOn: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowProvider: Represents a component that creates and represents volume shadow copies.
Win32_ShadowStorage: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowVolumeSupport: Represents an association between a shadow copy provider with a supported volume.
Win32_Share: Represents a shared resource on a computer system running Windows.
Win32_ShareToDirectory: Relates a shared resource on the computer system and the directory to which it is mapped.
Win32_ShortcutFile: Represents files that are shortcuts to other files, directories, and commands.
Win32_SID: Represents an arbitrary SID.
Win32_SIDandAttributes: Represents a security identifier (SID) and its attributes.
Win32_SMBIOSMemory: Represents the capabilities and management of memory-related logical devices.
Win32_SoundDevice: Represents the properties of a sound device on a computer system running Windows.
Win32_StartupCommand: Represents a command that runs automatically when a user logs onto the computer system.
Win32_SubDirectory: Relates a directory (folder) and one of its subdirectories (subfolders).
Win32_SystemAccount: Represents a system account.
Win32_SystemBIOS: Relates a computer system (including data such as startup properties, time zones, boot configurations, or administrative passwords) and a system BIOS (services, languages, and system management properties).
Win32_SystemBootConfiguration: Relates a computer system and its boot configuration.
Win32_SystemConfigurationChangeEvent: Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).
Win32_SystemDesktop: Relates a computer system and its desktop configuration.
Win32_SystemDevices: Relates a computer system and a logical device installed on that system.
Win32_SystemDriver: Represents the system driver for a base service.
Win32_SystemDriverPNPEntity: Relates a Plug and Play device on the Windows computer system and the driver that supports the Plug and Play device.
Win32_SystemEnclosure: Represents the properties associated with a physical system enclosure.
Win32_SystemLoadOrderGroups: Relates a computer system and a load order group.
Win32_SystemMemoryResource: Represents a system memory resource on a Windows system.
Win32_SystemNetworkConnections: Relates a network connection and the computer system on which it resides.
Win32_SystemOperatingSystem: Relates a computer system and its operating system.
Win32_SystemPartitions: Relates a computer system and a disk partition on that system.
Win32_SystemProcesses: Relates a computer system and a process running on that system.
Win32_SystemProgramGroups: Relates a computer system and a logical program group.
Win32_SystemResources: Relates a system resource and the computer system it resides on.
Win32_SystemServices: Relates a computer system and a service program that exists on the system.
Win32_SystemSetting: Relates a computer system and a general setting on that system.
Win32_SystemSlot: Represents physical connection points including ports, motherboard slots and peripherals, and proprietary connections points.
Win32_SystemSystemDriver: Relates a computer system and a system driver running on that computer system.
Win32_SystemTimeZone: Relates a computer system and a time zone.
Win32_SystemTrace: Base class for all system trace events, including module, process, and thread traces.
Win32_SystemUsers: Relates a computer system and a user account on that system.
Win32_TapeDrive: Represents a tape drive on a computer system running Windows.
Win32_TCPIPPrinterPort: Represents a TCP/IP service access point.
Win32_TemperatureProbe: Represents the properties of a temperature sensor (electronic thermometer).
Win32_Thread: Represents a thread of execution.
Win32_ThreadStartTrace: Indicates a new thread has started.
Win32_ThreadStopTrace: Indicates that a thread has stopped.
Win32_ThreadTrace: Base event class for thread events.
Win32_TimeZone: Represents the time zone information for a computer system running Windows.
Win32_TokenGroups: Represents information about the group SIDs in an access token.
Win32_TokenPrivileges: Represents information about a set of privileges for an access token.
Win32_Trustee: Represents a trustee.
Win32_USBController: Manages the capabilities of a universal serial bus (USB) controller.
Win32_USBControllerDevice: Relates a USB controller and the CIM_LogicalDevice instances connected to it.
Win32_USBHub: Represents the management characteristics of a USB hub.
Win32_UserAccount: Represents information about a user account on a computer system running Windows.
Win32_UserDesktop: Relates a user account and the desktop settings that are specific to it.
Win32_UserInDomain: Relates a user account and a Windows NT domain.
Win32_UTCTime: Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.
Win32_VideoController: Represents the capabilities and management capacity of the video controller on a computer system running Windows.
Win32_VideoSettings: Relates a video controller and video settings that can be applied to it.
Win32_VoltageProbe: Represents the properties of a voltage sensor (electronic voltmeter).
Win32_Volume: Represents an area of storage on a hard disk.
Win32_Volume: Represents an area of storage on a hard disk.
Win32_VolumeChangeEvent: Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.
Win32_VolumeQuota: Relates a volume to the per volume quota settings.
Win32_VolumeQuotaSetting: Relates disk quota settings with a specific disk volume.
Win32_VolumeUserQuota: Relates per user quotas to quota-enabled volumes.
Win32_VolumeUserQuota: Represents a volume to the per volume quota settings.
Win32_WindowsProductActivation: Contains properties and methods related to WPA.
Win32_WMIElementSetting: Association between a service running in the Windows system, and the WMI settings it can use.
Win32_WMISetting: Contains the operational parameters for the WMI service.

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

Class: Description

Win32_1394Controller: Represents the capabilities and management of a 1394 controller.

Win32_1394ControllerDevice: Relates the high-speed serial bus (IEEE 1394 Firewire) Controller and the CIM_LogicalDevice instance connected to it.

Win32_Account: Represents information about user accounts and group accounts known to the computer system running Windows.

Win32_AccountSID: Relates a security account instance with a security descriptor instance.

Win32_ACE: Represents an access control entry (ACE).

Win32_ActiveRoute: Relates the current IP4 route to the persisted IP route table.

Win32_AllocatedResource: Relates a logical device to a system resource.

Win32_AssociatedProcessorMemory: Relates a processor and its cache memory.

Win32_AutochkSetting: Represents the settings for the autocheck operation of a disk.

Win32_BaseBoard: Represents a baseboard (also known as a motherboard or system board).

Win32_BaseService: Represents executable objects that are installed in a registry database maintained by the Service Control Manager.

Win32_Battery: Represents a battery connected to the computer system.

Win32_BIOS: Represents the attributes of the computer system's basic input or output services (BIOS) that are installed on the computer.

Win32_BootConfiguration: Represents the boot configuration of a computer system running Windows.

Win32_Bus: Represents a physical bus as seen by a Windows operating system.

Win32_CacheMemory: Represents cache memory (internal and external) on a computer system.

Win32_CDROMDrive: Represents a CD-ROM drive on a computer system running Windows.

Win32_CIMLogicalDeviceCIMDataFile: Relates logical devices and data files, indicating the driver files used by the device.

Win32_ClassicCOMApplicationClasses: Relates a DCOM application and a COM component grouped under it.

Win32_ClassicCOMClass: Represents the properties of a COM component.

Win32_ClassicCOMClassSettings: Relates a COM class and the settings used to configure instances of the COM class.

Win32_ClientApplicationSetting: Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.

Win32_CollectionStatistics: Relates a managed system element collection and the class representing statistical information about the collection.

Win32_COMApplication: Represents a COM application.

Win32_COMApplicationClasses: Relates a COM component and the COM application where it resides.

Win32_COMApplicationSettings: Relates a DCOM application and its configuration settings.

Win32_COMClass: Represents the properties of a COM component.

Win32_ComClassAutoEmulator: Relates a COM class and another COM class that it automatically emulates.

Win32_ComClassEmulator: Relates two versions of a COM class.

Win32_ComponentCategory: Represents a component category.

Win32_ComputerShutdownEvent: Represents computer shutdown events.

Win32_ComputerSystem: Represents a computer system operating in a Windows environment.

Win32_ComputerSystemEvent: Represents events related to a computer system.

Win32_ComputerSystemProcessor: Relates a computer system and a processor running on that system.

Win32_ComputerSystemProduct: Represents a product.

Win32_ComputerSystemWindowsProductActivationSetting: Relates instances of Win32_ComputerSystem andWin32_WindowsProductActivation.

Win32_COMSetting: Represents the settings associated with a COM component or COM application.

Win32_ConnectionShare: Relates a shared resource on the computer and the connection made to the shared resource.

Win32_ControllerHasHub: Represents the hubs downstream from the universal serial bus (USB) controller.

Win32_CurrentProbe: Represents the properties of a current monitoring sensor (ammeter).

Win32_CurrentTime: Represents an instance in time as component seconds, minutes, day of the week, and so on.

Win32_DCOMApplication: Represents the properties of a DCOM application.

Win32_DCOMApplicationAccessAllowedSetting: Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.

Win32_DCOMApplicationLaunchAllowedSetting: Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.

Win32_DCOMApplicationSetting: Represents the settings of a DCOM application.

Win32_DependentService: Relates two interdependent base services.

Win32_Desktop: Represents the common characteristics of a user's desktop.

Win32_DesktopMonitor: Represents the type of monitor or display device attached to the computer system.

Win32_DeviceBus: Relates a system bus and a logical device using the bus.

Win32_DeviceChangeEvent: Represents device change events resulting from the addition, removal, or modification of devices on the computer system.

Win32_DeviceMemoryAddress: Represents a device memory address on a Windows system.

Win32_DeviceSettings: Relates a logical device and a setting that can be applied to it.

Win32_DFSNode: Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).

Win32_DFSNodeTarget: Represents the relationship of a DFS node to one of its targets.

Win32_DFSTarget: Represents the target of a DFS node.

Win32_Directory: Represents a directory entry on a computer system running Windows.

Win32_DirectorySpecification: Represents the directory layout for the product.

Win32_DiskDrive: Represents a physical disk drive as seen by a computer running the Windows operating system.

Win32_DiskDriveToDiskPartition: Relates a disk drive and a partition existing on it.

Win32_DiskPartition: Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.

Win32_DiskQuota: Tracks disk space usage for NTFS file system volumes.

Win32_DisplayControllerConfiguration: Represents the video adapter configuration information of a computer system running Windows. This class is obsolete. In place of this class, use the properties in the Win32_VideoController, Win32_DesktopMonitor, and CIM_VideoControllerResolution classes.

Win32_DMAChannel: Represents a direct memory access (DMA) channel on a computer system running Windows.

Win32_DriverForDevice: Relates a printer to a printer driver.

Win32_Environment: Represents an environment or system environment setting on a computer system running Windows.

Win32_Fan: Represents the properties of a fan device in the computer system.

Win32_FloppyController: Represents the capabilities and management capacity of a floppy disk drive controller.

Win32_FloppyDrive: Manages the capabilities of a floppy disk drive.

Win32_Group: Represents data about a group account.

Win32_GroupInDomain: Identifies the group accounts associated with a Windows NT domain.

Win32_GroupUser: Relates a group and an account that is a member of that group.

Win32_HeatPipe: Represents the properties of a heat pipe cooling device.

Win32_IDEController: Represents the capabilities of an Integrated Drive Electronics (IDE) controller device.

Win32_IDEControllerDevice: Association class that relates an IDE controller and the logical device.

Win32_ImplementedCategory: Relates a component category and the COM class using its interfaces.

Win32_InfraredDevice: Represents the capabilities and management of an infrared device.

Win32_IP4PersistedRouteTable: Represents persisted IP routes.

Win32_IP4RouteTable: Represents information that governs the routing of network data packets.

Win32_IP4RouteTableEvent: Represents IP route change events.

Win32_IRQResource: Represents an interrupt request line (IRQ) number on a Windows computer system.

Win32_Keyboard: Represents a keyboard installed on a computer system running Windows.

Win32_LoadOrderGroup: Represents a group of system services that define execution dependencies.

Win32_LoadOrderGroupServiceDependencies: Represents an association between a base service and a load order group that the service depends on to start running.

Win32_LoadOrderGroupServiceMembers: Relates a load order group and a base service.

Win32_LocalTime: Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.

Win32_LogicalDisk: Represents a data source that resolves to an actual local storage device on a computer system running Windows.

Win32_LogicalDiskRootDirectory: Relates a logical disk and its directory structure.

Win32_LogicalDiskToPartition: Relates a logical disk drive and the disk partition it resides on.

Win32_LogicalFileAccess: Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).

Win32_LogicalFileAuditing: Relates the security settings of a file or directory one member of its system access control list (SACL).

Win32_LogicalFileGroup: Relates the security settings of a file or directory and its group.

Win32_LogicalFileOwner: Relates the security settings of a file or directory and its owner.

Win32_LogicalFileSecuritySetting: Represents security settings for a logical file.

Win32_LogicalProgramGroup: Represents a program group in a computer system running Windows.

Win32_LogicalProgramGroupDirectory: Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.

Win32_LogicalProgramGroupItem: Represents an element contained by a Win32_ProgramGroup instance, that is not itself anotherWin32_ProgramGroup instance.

Win32_LogicalProgramGroupItemDataFile: Relates the program group items of the Start menu, and the files in which they are stored.

Win32_LogicalShareAccess: Relates the security settings of a share and one member of its DACL.

Win32_LogicalShareAuditing: Relates the security settings of a share and one member of its SACL.

Win32_LogicalShareSecuritySetting: Represents security settings for a logical file.

Win32_LogonSession: Describes the logon session or sessions associated with a user logged on to Windows.

Win32_LogonSessionMappedDisk: Represents the mapped logical disks associated with the session.

Win32_LUID: Represents a locally unique identifier (LUID)

Win32_LUIDandAttributes: Represents a LUID and its attributes.

Win32_MappedLogicalDisk: Represents network storage devices that are mapped as logical disks on the computer system running Windows.

Win32_MemoryArray: Represents the properties of the computer system memory array and mapped addresses.

Win32_MemoryArrayLocation: Relates a logical memory array and the physical memory array upon which it exists.

Win32_MemoryDevice: Represents the properties of a computer system's memory device along with its associated mapped addresses.

Win32_MemoryDeviceArray: Relates a memory device and the memory array in which it resides.

Win32_MemoryDeviceLocation: Association class that relates a memory device and the physical memory on which it exists.

Win32_MethodParameterClass: Abstract, base class that implements method parameters derived from this class.

Win32_ModuleLoadTrace: Indicates that a process has loaded a new module.

Win32_ModuleTrace: Base event for module events.

Win32_MotherboardDevice: Represents a device that contains the central components of the computer system running Windows.

Win32_NamedJobObject: Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.

Win32_NamedJobObjectActgInfo: Represents the I/O accounting information for a job object.

Win32_NamedJobObjectLimit: Represents an association between a job object and the job object limit settings.

Win32_NamedJobObjectLimitSetting: Represents the limit settings for a job object.

Win32_NamedJobObjectProcess: Relates a job object and the process contained in the job object.

Win32_NamedJobObjectSecLimit: Relates a job object and the job object security limit settings.

Win32_NamedJobObjectSecLimitSetting: Represents the security limit settings for a job object.

Win32_NamedJobObjectStatistics: Represents an association between a job object and the job object I/O accounting information class.

Win32_NetworkAdapter: Represents a network adapter on a computer system running Windows.

Win32_NetworkAdapterConfiguration: Represents the attributes and behaviors of a network adapter. The class is not guaranteed to be supported after the ratification of the Distributed Management Task Force (DMTF) CIM network specification.

Win32_NetworkAdapterSetting: Relates a network adapter and its configuration settings.

Win32_NetworkClient: Represents a network client on a computer system running Windows.

Win32_NetworkConnection: Represents an active network connection in a Windows environment.

Win32_NetworkLoginProfile: Represents the network login information of a specific user on a computer system running Windows.

Win32_NetworkProtocol: Represents a protocol and its network characteristics on a computer system running Windows.

Win32_NTDomain: Represents a Windows NT domain.

Win32_NTEventlogFile: Represents data stored in a Windows Event log file.

Win32_NTLogEvent: Represents Windows events.

Win32_NTLogEventComputer: Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.

Win32_NTLogEventLog: Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.

Win32_NTLogEventUser: Relates instances of Win32_NTLogEvent and Win32_UserAccount.

Win32_OnBoardDevice: Represents common adapter devices built into the motherboard (system board).

Win32_OperatingSystem: Represents an operating system installed on a computer system running Windows.

Win32_OperatingSystemAutochkSetting: Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.

Win32_OperatingSystemQFE: Relates an operating system and product updates applied as represented inWin32_QuickFixEngineering.

Win32_OSRecoveryConfiguration: Represents the types of information that will be gathered from memory when the operating system fails.

Win32_PageFile: Represents the file used for handling virtual memory file swapping on a Windows system.

Win32_PageFileElementSetting: Relates the initial settings of a page file and the state of those settings during normal use.

Win32_PageFileSetting: Represents the settings of a page file.

Win32_PageFileUsage: Represents the file used for handling virtual memory file swapping on a computer system running Windows.

Win32_ParallelPort: Represents the properties of a parallel port on a computer system running Windows.

Win32_PCMCIAController: Manages the capabilities of a Personal Computer Memory Card Interface Adapter (PCMCIA) controller device.

Win32_Perf: The base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData.

Win32_PerfFormattedData: an abstract base class for the pre-installed, calculated data classes.

Win32_PerfRawData: The abstract base class for all concrete raw performance counter classes.

Win32_PhysicalMedia: Represents any type of documentation or storage medium.

Win32_PhysicalMemory: Represents a physical memory device located on a computer as available to the operating system.

Win32_PhysicalMemoryArray: Represents details about the computer system's physical memory.

Win32_PhysicalMemoryLocation: Relates an array of physical memory and its physical memory.

Win32_PingStatus: Represents the values returned by the standard ping command.

Win32_PNPAllocatedResource: Represents an association between logical devices and system resources.

Win32_PNPDevice: Relates a device (known to Configuration Manager as a PNPEntity), and the function it performs.

Win32_PNPEntity: Represents the properties of a Plug and Play device.

Win32_PointingDevice: Represents an input device used to point to and select regions on the display of a computer system running Windows.

Win32_PortableBattery: Represents the properties of a portable battery, such as one used for a notebook computer.

Win32_PortConnector: Represents physical connection ports, such as DB-25 pin male, Centronics, and PS/2.

Win32_PortResource: Represents an I/O port on a computer system running Windows.

Win32_POTSModem: Represents the services and characteristics of a Plain Old Telephone Service (POTS) modem on a computer system running Windows.

Win32_POTSModemToSerialPort: Relates a modem and the serial port the modem uses.

Win32_PowerManagementEvent: Represents power management events resulting from power state changes.

Win32_Printer: Represents a device connected to a computer system running Windows that is capable of reproducing a visual image on a medium.

Win32_PrinterConfiguration: Defines the configuration for a printer device.

Win32_PrinterController: Relates a printer and the local device to which the printer is connected.

Win32_PrinterDriver: Represents the drivers for a Win32_Printer instance.

Win32_PrinterDriverDll: Relates a local printer and its driver file (not the driver itself).

Win32_PrinterSetting: Relates a printer and its configuration settings.

Win32_PrinterShare: Relates a local printer and the share that represents it as it is viewed over a network.

Win32_PrintJob: Represents a print job generated by a Windows-based application.

Win32_PrivilegesStatus: Represents information about the privileges required to complete an operation.

Win32_Process: Represents a sequence of events on a computer system running Windows.

Win32_Processor: Represents a device capable of interpreting a sequence of machine instructions on a computer system running Windows.

Win32_ProcessStartTrace: Indicates that a new process has started.

Win32_ProcessStartup: Represents the startup configuration of a computer system running Windows.

Win32_ProcessStopTrace: Indicates that a process has terminated.

Win32_ProcessTrace: Base event for process events.

Win32_ProgramGroupContents: Relates a program group order and an individual program group or item contained in it.

Win32_ProgramGroupOrItem: Represents a logical grouping of programs on the user's Start|Programs menu.

Win32_ProtocolBinding: Relates a system-level driver, network protocol, and network adapter.

Win32_Proxy: Contains properties and methods to query and configure an Internet connection related to WPA.

Win32_QuickFixEngineering: Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.

Win32_QuotaSetting: Contains setting information for disk quotas on a volume.

Win32_Refrigeration: Represents the properties of a refrigeration device.

Win32_Registry: Represents the system registry on a computer system running Windows.

Win32_ScheduledJob: Represents a job scheduled using the Windows schedule service.

Win32_SCSIController: Represents a small computer system interface (SCSI) controller on a computer system running Windows.

Win32_SCSIControllerDevice: Relates a SCSI controller and the logical device (disk drive) connected to it.

Win32_SecurityDescriptor: Represents a structural representation of a SECURITY_DESCRIPTOR.

Win32_SecuritySetting: Represents security settings for a managed element.

Win32_SecuritySettingAccess: Represents the rights granted and denied to a trustee for a given object.

Win32_SecuritySettingAuditing: Represents the auditing for a given trustee on a given object.

Win32_SecuritySettingGroup: Relates the security of an object and its group.

Win32_SecuritySettingOfLogicalFile: Represents security settings of a file or directory object.

Win32_SecuritySettingOfLogicalShare: Represents security settings of a shared object.

Win32_SecuritySettingOfObject: Relates an object to its security settings.

Win32_SecuritySettingOwner: Relates the security settings of an object and its owner.

Win32_SerialPort: Represents a serial port on a computer system running Windows.

Win32_SerialPortConfiguration: Represents the settings for data transmission on a Windows serial port.

Win32_SerialPortSetting: Relates a serial port and its configuration settings.

Win32_ServerConnection: Represents the connections made from a remote computer to a shared resource on the local computer.

Win32_ServerSession: Represents the sessions that are established with the local computer by users on a remote computer.

Win32_Service: Represents a service on a computer system running Windows.

Win32_SessionConnection: Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.

Win32_SessionProcess: Represents an association between a logon session and the processes associated with that session.

Win32_ShadowBy: Represents the association between a shadow copy and the provider that creates the shadow copy.

Win32_ShadowContext: Specifies how a shadow copy is to be created, queried, or deleted.

Win32_ShadowCopy: Represents a duplicate copy of the original volume at a previous time.

Win32_ShadowDiffVolumeSupport: Represents an association between a shadow copy provider and a storage volume.

Win32_ShadowFor: Represents an association between a shadow copy and the volume for which the shadow copy is created.

Win32_ShadowOn: Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowProvider: Represents a component that creates and represents volume shadow copies.

Win32_ShadowStorage: Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowVolumeSupport: Represents an association between a shadow copy provider with a supported volume.

Win32_Share: Represents a shared resource on a computer system running Windows.

Win32_ShareToDirectory: Relates a shared resource on the computer system and the directory to which it is mapped.

Win32_ShortcutFile: Represents files that are shortcuts to other files, directories, and commands.

Win32_SID: Represents an arbitrary SID.

Win32_SIDandAttributes: Represents a security identifier (SID) and its attributes.

Win32_SMBIOSMemory: Represents the capabilities and management of memory-related logical devices.

Win32_SoundDevice: Represents the properties of a sound device on a computer system running Windows.

Win32_StartupCommand: Represents a command that runs automatically when a user logs onto the computer system.

Win32_SubDirectory: Relates a directory (folder) and one of its subdirectories (subfolders).

Win32_SystemAccount: Represents a system account.

Win32_SystemBIOS: Relates a computer system (including data such as startup properties, time zones, boot configurations, or administrative passwords) and a system BIOS (services, languages, and system management properties).

Win32_SystemBootConfiguration: Relates a computer system and its boot configuration.

Win32_SystemConfigurationChangeEvent: Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).

Win32_SystemDesktop: Relates a computer system and its desktop configuration.

Win32_SystemDevices: Relates a computer system and a logical device installed on that system.

Win32_SystemDriver: Represents the system driver for a base service.

Win32_SystemDriverPNPEntity: Relates a Plug and Play device on the Windows computer system and the driver that supports the Plug and Play device.

Win32_SystemEnclosure: Represents the properties associated with a physical system enclosure.

Win32_SystemLoadOrderGroups: Relates a computer system and a load order group.

Win32_SystemMemoryResource: Represents a system memory resource on a Windows system.

Win32_SystemNetworkConnections: Relates a network connection and the computer system on which it resides.

Win32_SystemOperatingSystem: Relates a computer system and its operating system.

Win32_SystemPartitions: Relates a computer system and a disk partition on that system.

Win32_SystemProcesses: Relates a computer system and a process running on that system.

Win32_SystemProgramGroups: Relates a computer system and a logical program group.

Win32_SystemResources: Relates a system resource and the computer system it resides on.

Win32_SystemServices: Relates a computer system and a service program that exists on the system.

Win32_SystemSetting: Relates a computer system and a general setting on that system.

Win32_SystemSlot: Represents physical connection points including ports, motherboard slots and peripherals, and proprietary connections points.

Win32_SystemSystemDriver: Relates a computer system and a system driver running on that computer system.

Win32_SystemTimeZone: Relates a computer system and a time zone.

Win32_SystemTrace: Base class for all system trace events, including module, process, and thread traces.

Win32_SystemUsers: Relates a computer system and a user account on that system.

Win32_TapeDrive: Represents a tape drive on a computer system running Windows.

Win32_TCPIPPrinterPort: Represents a TCP/IP service access point.

Win32_TemperatureProbe: Represents the properties of a temperature sensor (electronic thermometer).

Win32_Thread: Represents a thread of execution.

Win32_ThreadStartTrace: Indicates a new thread has started.

Win32_ThreadStopTrace: Indicates that a thread has stopped.

Win32_ThreadTrace: Base event class for thread events.

Win32_TimeZone: Represents the time zone information for a computer system running Windows.

Win32_TokenGroups: Represents information about the group SIDs in an access token.

Win32_TokenPrivileges: Represents information about a set of privileges for an access token.

Win32_Trustee: Represents a trustee.

Win32_USBController: Manages the capabilities of a universal serial bus (USB) controller.

Win32_USBControllerDevice: Relates a USB controller and the CIM_LogicalDevice instances connected to it.

Win32_USBHub: Represents the management characteristics of a USB hub.

Win32_UserAccount: Represents information about a user account on a computer system running Windows.

Win32_UserDesktop: Relates a user account and the desktop settings that are specific to it.

Win32_UserInDomain: Relates a user account and a Windows NT domain.

Win32_UTCTime: Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.

Win32_VideoController: Represents the capabilities and management capacity of the video controller on a computer system running Windows.

Win32_VideoSettings: Relates a video controller and video settings that can be applied to it.

Win32_VoltageProbe: Represents the properties of a voltage sensor (electronic voltmeter).

Win32_Volume: Represents an area of storage on a hard disk.

Win32_VolumeChangeEvent: Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.

Win32_VolumeQuota: Relates a volume to the per volume quota settings.

Win32_VolumeQuotaSetting: Relates disk quota settings with a specific disk volume.

Win32_VolumeUserQuota: Relates per user quotas to quota-enabled volumes.

Win32_VolumeUserQuota: Represents a volume to the per volume quota settings.

Win32_WindowsProductActivation: Contains properties and methods related to WPA.

Win32_WMIElementSetting: Association between a service running in the Windows system, and the WMI settings it can use.

Win32_WMISetting: Contains the operational parameters for the WMI service.

Security

Nikto

13/01/201713/04/2017

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated. For more information Install (recommended): Run from a git repo – https://github.com/sullo/nikto Download (recommended): Latest GitHub Release (zip) Stable Release: Version 2.1.5 bz2 or […]

Older Posts