Wmic

From aldeid
Jump to navigation Jump to search
DRAFT
This page is still a draft. Thank you for your understanding.

Description

INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

Usage

Windows wmic

Syntax

INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

Options

INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

Linux client

INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.

Examples

Remotely execute commands

C:\>wmic /node:192.168.1.12 /user:unknown process call create tool.exe

Remotely list processes

C:\>wmic /node:192.168.1.12 /user:unknown process list brief
Entrez le mot de passe :********

HandleCount  Name                    Priority  ProcessId  ThreadCount  WorkingSetSize
0            System Idle Process     0         0          1            16384
757          System                  8         4          58           217088
19           smss.exe                11        460        3            434176
445          csrss.exe               13        924        12           3747840
445          winlogon.exe            13        948        19           4689920
279          services.exe            9         992        15           3502080
367          lsass.exe               9         1004       23           6361088
106          VBoxService.exe         8         1172       8            3584000
237          svchost.exe             8         1224       19           5251072
281          svchost.exe             8         1336       11           4624384
[SNIP]

List autostart processes

C:\>wmic /node:192.168.1.12 /user:unknown startup list full
[SNIP]
Caption=ConnectionCenter
Command="C:\Program Files\Citrix\ICA Client\concentr.exe" /startup
Description=ConnectionCenter
Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SettingID=
User=All Users

Caption=MSC
Command="c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
Description=MSC
Location=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SettingID=
User=All Users
[SNIP]

Troubleshooting

Access denied

INCOMPLETE SECTION OR ARTICLE
This section/article is being written and is therefore not complete.
Thank you for your comprehension.