mirror of
https://github.com/NetSPI/PowerHuntShares.git
synced 2025-05-05 03:38:42 +02:00
Update PowerHuntShares.psm1
This commit is contained in:
parent
ad5cb43a65
commit
76946cac82
@ -4,7 +4,7 @@
|
||||
#--------------------------------------
|
||||
# Author: Scott Sutherland, 2024 NetSPI
|
||||
# License: 3-clause BSD
|
||||
# Version: v1.43
|
||||
# Version: v1.44
|
||||
# References: This script includes custom code and code taken and modified from the open source projects PowerView, Invoke-Ping, and Invoke-Parrell.
|
||||
function Invoke-HuntSMBShares
|
||||
{
|
||||
@ -1625,6 +1625,12 @@ function Invoke-HuntSMBShares
|
||||
# Last modified
|
||||
$ShareLastModified = $ExcessiveSharePrivs | where sharename -EQ "$ShareName" | select LastModifiedDate | foreach{[datetime]$_.LastModifiedDate } | Sort-Object -Descending | select -First 1 | foreach {$_.tostring("MM.dd.yyyy HH:mm:ss")}
|
||||
|
||||
# Share owner list
|
||||
$ShareOwnerList = $ExcessiveSharePrivs | where sharename -EQ "$ShareName" | Sort-Object | select ShareOwner -Unique -ExpandProperty ShareOwner
|
||||
|
||||
# Share owner list count
|
||||
$ShareOwnerListCount = $ShareOwnerList | measure-object | select count -expandproperty count
|
||||
|
||||
# Share folder group list
|
||||
$ShareFolderGroupList = $ExcessiveSharePrivs | where sharename -EQ "$ShareName" | select ShareName,FileListGroup -Unique | Group-Object FileListGroup | sort count -Descending | select count, name |
|
||||
foreach {
|
||||
@ -1668,13 +1674,20 @@ function Invoke-HuntSMBShares
|
||||
</span>
|
||||
</td>
|
||||
<td>
|
||||
|
||||
<button class="collapsible"><span style="color:#CE112D;"></span>$ShareFolderGroupCount</button>
|
||||
<div class="content">
|
||||
<div class="filelistparent" >
|
||||
$ShareFolderGroupList
|
||||
</div>
|
||||
</div>
|
||||
</td>
|
||||
<td>
|
||||
<button class="collapsible"><span style="color:#CE112D;"></span>$ShareOwnerListCount</button>
|
||||
<div class="content">
|
||||
<div class="filelistparent" >
|
||||
$ShareOwnerList
|
||||
</div>
|
||||
</div>
|
||||
</td>
|
||||
<td>
|
||||
$ComputerBar
|
||||
@ -3644,6 +3657,7 @@ This section contains a list of the most common SMB share names. In some cases,
|
||||
<th align="left">Share Count</th>
|
||||
<th align="left">Share Name</th>
|
||||
<th align="left">Unique Folder Group Count</th>
|
||||
<th align="left">Unique Owners</th>
|
||||
<th align="left">Affected Computers</th>
|
||||
<th align="left">Affected Shares</th>
|
||||
<th align="left">Affected ACLs</th>
|
||||
|
Loading…
x
Reference in New Issue
Block a user