From fe3c4a21c7ac64a92bdcb317a1b8be59de4710c3 Mon Sep 17 00:00:00 2001 From: Scott Sutherland Date: Wed, 6 Apr 2022 07:52:14 -0500 Subject: [PATCH] fixed links --- PowerHuntShares.psm1 | 47 ++++++++++++++++++++++---------------------- 1 file changed, 24 insertions(+), 23 deletions(-) diff --git a/PowerHuntShares.psm1 b/PowerHuntShares.psm1 index 0e92b40..3d6296b 100644 --- a/PowerHuntShares.psm1 +++ b/PowerHuntShares.psm1 @@ -4,7 +4,7 @@ #-------------------------------------- # Author: Scott Sutherland, 2022 NetSPI # License: 3-clause BSD -# Version: v1.15 +# Version: v1.16 # dont use ping filter for 445, add custom user group option, and potentially identify groups that have large 20% of domain user members (make this configrable) # References: This script includes code taken and modified from the open source projects PowerView, Invoke-Ping, and Invoke-Parrell. function Invoke-HuntSMBShares @@ -259,7 +259,8 @@ function Invoke-HuntSMBShares # Create sub directories mkdir $OutputDirectoryBase | Out-Null - mkdir "$OutputDirectoryBase\Results" | Out-Null + $SubDir = "Results" + mkdir "$OutputDirectoryBase\$SubDir" | Out-Null $OutputDirectory = "$OutputDirectoryBase\Results" Write-Output " [*][$Time] Output Directory: $OutputDirectoryBase" } @@ -2952,63 +2953,63 @@ Below is a summary of the domain computers that were targeted, connectivity to t
100.00% $ComputerCount - CSV | HTML + CSV | HTML PING RESPONSE
$PercentComputerPingP $ComputerPingableCount - CSV | HTML + CSV | HTML PORT 445 OPEN
$PercentComputerPortP $Computers445OpenCount - CSV | HTML + CSV | HTML HOST SHARE
$PercentComputerWitShareP $AllComputersWithSharesCount - CSV | HTML + CSV | HTML HOST NON-DEFAULT SHARE
$PercentComputerNonDefaultP $ComputerwithNonDefaultCount - CSV | HTML + CSV | HTML HOST POTENITIALLY INSECURE SHARE
$PercentComputerExPrivP $ComputerWithExcessive - CSV | HTML + CSV | HTML HOST READABLE SHARE
$PercentComputerReadP $ComputerWithReadCount - CSV | HTML + CSV | HTML HOST WRITEABLE SHARE
$PercentComputerWriteP $ComputerWithWriteCount - CSV | HTML + CSV | HTML HOST HIGH RISK SHARE
$PercentComputerHighRiskP $ComputerwithHighRisk - CSV | HTML + CSV | HTML @@ -3043,42 +3044,42 @@ Below is a summary of the SMB shares discovered on domain computers that may pro
100.00% $AllSMBSharesCount - CSV | HTML + CSV | HTML NON-DEFAULT
$PercentSharesNonDefaultP $SharesNonDefaultCount - CSV | HTML + CSV | HTML POTENTIALLY EXCESSIVE
$PercentSharesExPrivP $ExcessiveSharesCount - CSV | HTML + CSV | HTML READ ACCESS
$PercentSharesReadP $SharesWithReadCount - CSV | HTML + CSV | HTML WRITE ACCESS
$PercentSharesWriteP $SharesWithWriteCount - CSV | HTML + CSV | HTML HIGH RISK
$PercentSharesHighRiskP $SharesHighRiskCount - CSV | HTML + CSV | HTML @@ -3116,42 +3117,42 @@ Below is a summary of the SMB share ACL entries discovered on domain computers t
100.00% $ShareACLsCount - CSV | HTML + CSV | HTML NON-DEFAULT
$PercentAclNonDefaultP $AclNonDefaultCount - CSV | HTML + CSV | HTML POTENTIALLY EXCESSIVE
$PercentAclExPrivP $ExcessiveSharePrivsCount - CSV | HTML + CSV | HTML READ ACCESS
$PercentAclReadP $AclWithReadCount - CSV | HTML + CSV | HTML WRITE ACCESS
$PercentAclWriteP $AclWithWriteCount - CSV | HTML + CSV | HTML HIGH RISK
$PercentAclHighRiskP $AclHighRiskCount - CSV | HTML + CSV | HTML