PowerView 3.0

Overview

PowerView 3 is the latest version of the PowerView PowerShell module, which is a popular tool for Active Directory reconnaissance and exploitation.

Code examples

Computer enumeration

Ping sweep and computer discovery

Get-DomainComputer | %{Test-Connection -Count 1 -ComputerName $_.cn -ErrorAction SilentlyContinue}

ACL enumeration

Viewing ACL applied on domain object.

Get-ObjectAcl -Identity rfc -ResolveGUIDs | Foreach-Object {$_ | Add-Member -NotePropertyName Identity -NotePropertyValue (ConvertFrom-SID $_.SecurityIdentifier.value) -Force; $_} | Foreach-Object {if ($_.Identity -eq $("$env:UserDomain\$env:Username")) {$_}}

References

https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Recon/PowerView.ps1