diff --git a/PowerHuntShares.psm1 b/PowerHuntShares.psm1
index 0e92b40..3d6296b 100644
--- a/PowerHuntShares.psm1
+++ b/PowerHuntShares.psm1
@@ -4,7 +4,7 @@
#--------------------------------------
# Author: Scott Sutherland, 2022 NetSPI
# License: 3-clause BSD
-# Version: v1.15
+# Version: v1.16
# dont use ping filter for 445, add custom user group option, and potentially identify groups that have large 20% of domain user members (make this configrable)
# References: This script includes code taken and modified from the open source projects PowerView, Invoke-Ping, and Invoke-Parrell.
function Invoke-HuntSMBShares
@@ -259,7 +259,8 @@ function Invoke-HuntSMBShares
# Create sub directories
mkdir $OutputDirectoryBase | Out-Null
- mkdir "$OutputDirectoryBase\Results" | Out-Null
+ $SubDir = "Results"
+ mkdir "$OutputDirectoryBase\$SubDir" | Out-Null
$OutputDirectory = "$OutputDirectoryBase\Results"
Write-Output " [*][$Time] Output Directory: $OutputDirectoryBase"
}
@@ -2952,63 +2953,63 @@ Below is a summary of the domain computers that were targeted, connectivity to t
|
100.00% |
$ComputerCount |
- CSV | HTML |
+ CSV | HTML |
| PING RESPONSE |
|
$PercentComputerPingP |
$ComputerPingableCount |
- CSV | HTML |
+ CSV | HTML |
| PORT 445 OPEN |
|
$PercentComputerPortP |
$Computers445OpenCount |
- CSV | HTML |
+ CSV | HTML |
| HOST SHARE |
|
$PercentComputerWitShareP |
$AllComputersWithSharesCount |
- CSV | HTML |
+ CSV | HTML |
| HOST NON-DEFAULT SHARE |
|
$PercentComputerNonDefaultP |
$ComputerwithNonDefaultCount |
- CSV | HTML |
+ CSV | HTML |
| HOST POTENITIALLY INSECURE SHARE |
|
$PercentComputerExPrivP |
$ComputerWithExcessive |
- CSV | HTML |
+ CSV | HTML |
| HOST READABLE SHARE |
|
$PercentComputerReadP |
$ComputerWithReadCount |
- CSV | HTML |
+ CSV | HTML |
| HOST WRITEABLE SHARE |
|
$PercentComputerWriteP |
$ComputerWithWriteCount |
- CSV | HTML |
+ CSV | HTML |
| HOST HIGH RISK SHARE |
|
$PercentComputerHighRiskP |
$ComputerwithHighRisk |
- CSV | HTML |
+ CSV | HTML |
@@ -3043,42 +3044,42 @@ Below is a summary of the SMB shares discovered on domain computers that may pro
|
100.00% |
$AllSMBSharesCount |
- CSV | HTML |
+ CSV | HTML |
| NON-DEFAULT |
|
$PercentSharesNonDefaultP |
$SharesNonDefaultCount |
- CSV | HTML |
+ CSV | HTML |
| POTENTIALLY EXCESSIVE |
|
$PercentSharesExPrivP |
$ExcessiveSharesCount |
- CSV | HTML |
+ CSV | HTML |
| READ ACCESS |
|
$PercentSharesReadP |
$SharesWithReadCount |
- CSV | HTML |
+ CSV | HTML |
| WRITE ACCESS |
|
$PercentSharesWriteP |
$SharesWithWriteCount |
- CSV | HTML |
+ CSV | HTML |
| HIGH RISK |
|
$PercentSharesHighRiskP |
$SharesHighRiskCount |
- CSV | HTML |
+ CSV | HTML |
@@ -3116,42 +3117,42 @@ Below is a summary of the SMB share ACL entries discovered on domain computers t
|
100.00% |
$ShareACLsCount |
- CSV | HTML |
+ CSV | HTML |
| NON-DEFAULT |
|
$PercentAclNonDefaultP |
$AclNonDefaultCount |
- CSV | HTML |
+ CSV | HTML |
| POTENTIALLY EXCESSIVE |
|
$PercentAclExPrivP |
$ExcessiveSharePrivsCount |
- CSV | HTML |
+ CSV | HTML |
| READ ACCESS |
|
$PercentAclReadP |
$AclWithReadCount |
- CSV | HTML |
+ CSV | HTML |
| WRITE ACCESS |
|
$PercentAclWriteP |
$AclWithWriteCount |
- CSV | HTML |
+ CSV | HTML |
| HIGH RISK |
|
$PercentAclHighRiskP |
$AclHighRiskCount |
- CSV | HTML |
+ CSV | HTML |