add systeminfo command to windows_cmd_config.md

This commit is contained in:
yehualiu 2013-12-04 10:41:32 +08:00
parent b46ae419d8
commit f902252e55

View File

@ -56,6 +56,13 @@ Commands that display information about the configuration of the victim and are
* **Output**: * **Output**:
* <div class="slide" style="cursor: pointer;"> **Windows 2008:** Show/Hide</div><div class="view"><code>C:\Users\johndoe>whoami<br>lab\johndoe<br><br>C:\Users\johndoe>whoami/all<br><br>USER INFORMATION<br>----------------<br><br>User Name SID<br>=========== ===========================================<br>lab\johndoe S-1-5-21-60789211-843652525-1994898995-1001<br><br><br>GROUP INFORMATION<br>-----------------<br><br>Group Name Type SID Attributes<br>========================================== ================ ============ ==================================================<br>Everyone Well-known group S-1-1-0 Mandatory group, Enabled by default, Enabled group<br>BUILTIN\Users Alias S-1-5-32-545 Mandatory group, Enabled by default, Enabled group<br>BUILTIN\Administrators Alias S-1-5-32-544 Group used for deny only<br>BUILTIN\Pre-Windows 2000 Compatible Access Alias S-1-5-32-554 Group used for deny only<br>NT AUTHORITY\INTERACTIVE Well-known group S-1-5-4 Mandatory group, Enabled by default, Enabled group<br>NT AUTHORITY\Authenticated Users Well-known group S-1-5-11 Mandatory group, Enabled by default, Enabled group<br>NT AUTHORITY\This Organization Well-known group S-1-5-15 Mandatory group, Enabled by default, Enabled group<br>LOCAL Well-known group S-1-2-0 Mandatory group, Enabled by default, Enabled group<br>Mandatory Label\Medium Mandatory Level Unknown SID type S-1-16-8192 Mandatory group, Enabled by default, Enabled group<br><br><br>PRIVILEGES INFORMATION<br>----------------------<br><br>Privilege Name Description State<br>============================= ==================================== ========<br>SeShutdownPrivilege Shut down the system Disabled<br>SeChangeNotifyPrivilege Bypass traverse checking Enabled<br>SeUndockPrivilege Remove computer from docking station Disabled<br>SeIncreaseWorkingSetPrivilege Increase a process working set Disabled<br>SeTimeZonePrivilege Change the time zone Disabled</code></div> * <div class="slide" style="cursor: pointer;"> **Windows 2008:** Show/Hide</div><div class="view"><code>C:\Users\johndoe>whoami<br>lab\johndoe<br><br>C:\Users\johndoe>whoami/all<br><br>USER INFORMATION<br>----------------<br><br>User Name SID<br>=========== ===========================================<br>lab\johndoe S-1-5-21-60789211-843652525-1994898995-1001<br><br><br>GROUP INFORMATION<br>-----------------<br><br>Group Name Type SID Attributes<br>========================================== ================ ============ ==================================================<br>Everyone Well-known group S-1-1-0 Mandatory group, Enabled by default, Enabled group<br>BUILTIN\Users Alias S-1-5-32-545 Mandatory group, Enabled by default, Enabled group<br>BUILTIN\Administrators Alias S-1-5-32-544 Group used for deny only<br>BUILTIN\Pre-Windows 2000 Compatible Access Alias S-1-5-32-554 Group used for deny only<br>NT AUTHORITY\INTERACTIVE Well-known group S-1-5-4 Mandatory group, Enabled by default, Enabled group<br>NT AUTHORITY\Authenticated Users Well-known group S-1-5-11 Mandatory group, Enabled by default, Enabled group<br>NT AUTHORITY\This Organization Well-known group S-1-5-15 Mandatory group, Enabled by default, Enabled group<br>LOCAL Well-known group S-1-2-0 Mandatory group, Enabled by default, Enabled group<br>Mandatory Label\Medium Mandatory Level Unknown SID type S-1-16-8192 Mandatory group, Enabled by default, Enabled group<br><br><br>PRIVILEGES INFORMATION<br>----------------------<br><br>Privilege Name Description State<br>============================= ==================================== ========<br>SeShutdownPrivilege Shut down the system Disabled<br>SeChangeNotifyPrivilege Bypass traverse checking Enabled<br>SeUndockPrivilege Remove computer from docking station Disabled<br>SeIncreaseWorkingSetPrivilege Increase a process working set Disabled<br>SeTimeZonePrivilege Change the time zone Disabled</code></div>
### systeminfo
* **Command**: `systeminfo`
* **Command with arguments**: NA
* **Description**:In computing, systeminfo.exe, a command-line utility shipped with Microsoft Windows versions from Windows XP onwards, produces summary output of Windows hardware/software operating-environment parameters.
* **Output**:
*<div class="slide" style="cursor: pointer;"> **Windows 2008:** Show/Hide</div><div class="view"><code>C:\Windows\system32>systeminfo<br><br>Host Name: ADMIN-PC<br>OS Name: Microsoft Windows 2008<br>OS Version: 6.1.7601 Service Pack 1 Build 7601<br>OS Manufacturer: Microsoft Corporation<br>OS Configuration: Standalone Workstation<br>OS Build Type: Multiprocessor Free<br>Registered Owner: johndoe<br>Registered Organization: <br>Product ID: 00426-OEM-8992662-00400<br>System Type: x64-based PC<br>Processor(s): 1 Processor(s) Installed.<br>...</code></div>
### type ### type
* **Command**: `type` * **Command**: `type`
* **Command with arguments**: `type %WINDIR%\System32\drivers\etc\hosts` * **Command with arguments**: `type %WINDIR%\System32\drivers\etc\hosts`