
Netview enumerates systems using WinAPI calls
Netview 是一款枚举工具。它使用(配合 -d)当前域或指定域(配合 -d domain)来枚举主机。如果您希望改用包含主机列表的文件,也可以使用 -f。您希望排除的任何主机名都可以通过 -e 指定列表。如果您想查询某个域组并突出显示这些用户登录的位置,请使用 -g 指定该组。
编译版本:https://github.com/mubix/netview/releases
获取主机列表后,netview 会逐台检查以下内容:
所有输出都可以通过 '-o' 参数重定向到文件。可以使用 -c 检查对已发现共享的访问权限。
此外,可以使用 -i 指定主机枚举之间的延迟(秒),并使用 -j 指定百分比抖动(0.0-1.0)来随机化该间隔。
== 示例输出
=== 无参数 {{{ C:>netview.exe
-h : Display this help menu -f filename.txt : Specifies a file to pull a list of hosts from -e filename.txt : Specifies a file of hostnames to exclude -o filename.txt : Out to file instead of STDOUT -d domain : Specifies a domain to pull a list of hosts from uses current domain if none specified -g group : Specify a group name for user hunting uses 'Domain Admins' if none specified -c : Check found shares for read access -i interval : Seconds to wait between enumerating hosts -j jitter : Percent jitter to apply to the interval (0.0-1.0) }}}
=== -d / 带域的 -d / 或带文件名的 -f {{{ C:>netview.exe -d
[*] -d used without domain specifed - using current domain [+] Number of hosts: 1
[+] Host: HOST1
Enumerating AD Info [+] HOST1 - Comment - [+] HOST1 - OS Version - 6.1 [+] HOST1 - MSSQL Server
Enumerating IP Info [+] HOST1 - IPv6 Address - fe80::(removed from example)%10 [+] HOST1 - IPv6 Address - fe80::(removed from example)%15 [+] HOST1 - IPv6 Address - fe80::(removed from example)%12 [+] HOST1 - IPv4 Address - 172.16.10.50 [+] HOST1 - IPv4 Address - 192.168.56.1 [+] HOST1 - IPv6 Address - 2001:(removed from example)
Enumerating Share Info [+] HOST1 - Share - ADMIN$ Remote Admin [+] HOST1 - Share - C$ Default share [+] HOST1 - Share - Backups [+] HOST1 - Share - Finance [+] HOST1 - Share - IPC$ Remote IPC [+] HOST1 - Share - print$ Printer Drivers [+] HOST1 - Share - SharedPrinter Kyocera 5112
Enumerating Session Info [+] HOST1 - Session - MUBIX from \172.16.10.207 - Active: 48 - Idle: 44
Enumerating Logged-on Users [+] HOST1 - Logged-on - HOST1\mubix [+] HOST1 - Logged-on - HOST1\mubix
}}}