Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Get-ReconInfo — A powershell script that prints a lot of IP and connection info to the screen | Kitploit
Tools/GitHubGitHub/raikia/get-reconinfo
ReconnaissanceNetwork MappingInformation GatheringPenetration Testing
GitHubraikia/get-reconinfo

Get-ReconInfo

A powershell script that prints a lot of IP and connection info to the screen

View Repository
3149 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Get-ReconInfo

root@kitploit:~
NAME
    Get-ReconInfo
    
SYNOPSIS
    Lists connections and relevant info about a system
    
    
    Author: Chris King (@raikiasec)
    
    
SYNTAX
    Get-ReconInfo [<CommonParameters>]
    
    
DESCRIPTION
    This script runs the following commands on the local system, parses the output, and prints the results to the 
    screen:
          * netstat -ano
          * ipconfig /all
          * arp -a
          * tasklist /v
          * route print
          * net session
          * net localgroup "Administrators"
          * (Get-WmiObject Win32_ComputerSystem).Name
          * (Get-WmiObject Win32_ComputerSystem).Domain
     
    This is especially useful when run at-scale in a network where you may need to identify routes and connections 
    into a specific IP zone. You can
    execute this script on the remote systems and get greppable output to see if they have connections to your targets.
    
    This script pairs well with Invoke-RemoteScriptWithOutput from WMIOPS (https://github.com/ChrisTruncer/WMIOps).  
    Using WMIOps and this script,
    you can get connection information from a large number of systems very quickly, with easily digestable output.
    
    By default, the script returns the full raw output.  If you only want the greppable output, set $PRINT_FULL to 
    false.  Its not a parameter because WMIOPS
    does not accept parameters for Invoke-RemoteScriptWithOutput.  Its recommended you redirect the output to a file, 
    and then you can grep through the output
    easily.
    

RELATED LINKS

REMARKS
    To see the examples, type: "get-help Get-ReconInfo -examples".
    For more information, type: "get-help Get-ReconInfo -detailed".
    For technical information, type: "get-help Get-ReconInfo -full".
Download Tool