PowerView

GitHub - PowerShellMafia/PowerSploit: PowerSploit - A PowerShell Post-Exploitation FrameworkGitHub

PowerView is part of the PowerSploit collection of Microsoft PowerShell modules. It has a bunch of functions that perform network and Windows domain enumeration.

Windows (Target)

## Get The Current User's Domain
Get-NetDomain

## Get All Domains Of The Current Forest
Get-NetForestDomain

## Get Domain Controllers
Get-DomainController -Domain [domain]

## Get A List Of All Users
Get-NetUser

## Get A List Of All Computers
Get-NetComputer

## Get All Domain Members Of A Group
Get-NetGroupMember -GroupName "domain admins"

## Get Users That Are Logged On To A Computer
Get-NetLoggedOn -ComputerName pc-weelee

## Get Password Policy
(Get-DomainPolicy)."system access"