Micsoftvn
  • 😙Micsoftvn
  • Use Cases
    • For Hacking
      • Kiểm thử mạng
      • Tor - Sock - Proxy
      • Poc
        • POC -draytek-vigor2960 ( CVE-2024-12987 )
    • For Security
      • Security website with htacess file
      • Incident Response
        • Cli AWS - Incident
        • Command line
      • Add basic Authen with Cloudflare
      • Haderning Apache
      • Thiết lập ANTT cho TLS
      • Check network traffic ( Ddos )
      • Tools
        • Tools for AWS
        • Fail2Ban Cheat Sheet
      • Các lỗi thường bảo mật với Websocket
    • For Engineering
      • Thiết lập cấu hình CMD log
      • Cấu hình CLI kết nối đến AWS
      • Sử dụng PET
      • 🔧 Gom Nhóm IP Thành Subnet CIDR Tối Ưu
      • PAC Proxy: Tự Động Cấu Hình Proxy Trong Môi Trường Doanh Nghiệp
      • Sử dụng Podman tạo base images Pentest
      • Tạo YUM Local Repository Trong Container CentOS 7 Sử Dụng Podman
    • For SysAdmin
      • Scripts
        • Bash Script Gen SSH key
        • Health check System
      • Install Oracle Java JDK 18 in Ubuntu 20.04
      • Run script on startup on Ubuntu 22.04
      • Remove Snap from Ubuntu
      • Config Network on Ubuntu Server
      • View Wifi Network Connection
      • Add user can access network interfaces
      • USB drive with QEMU
      • INSTALL AND MANAGE MULTIPLE JAVA JDK AND JRE VERSIONS ON UBUNTU
      • Export Windows Config
      • Auto Install Openvpn
      • Install Nginx Centos 7 or Docker
      • Install Mkdocs
      • Cheat Sheet
        • Cheat sheet Postgres
      • Cài Đặt Fluent Bit Trên Amazon Linux 2023 & Tạo Repository Offline
    • Installations
      • Install Helm on Ubuntu
  • Extras
    • Keyboard Shortcuts
Powered by GitBook
On this page

Was this helpful?

  1. Use Cases
  2. For SysAdmin

Export Windows Config

@echo on
@echo ==============================================
@echo = Report Windows Config....................=
@echo = Please wait a moment.......................=
@echo = Write by Micsoftvn.......................=
@echo ==============================================
@echo off

mkdir C:\Report
Rem ====GET INFO===========

Rem ====GET INFO 2===========
wmic SHARE GET name,AllowMaximum,Description,Name,Path,Status  /format:htable >>"C:\Report\INFO.htm

Rem ====GET INFO 3-4 ===========
wmic UserAccount where (Name="Administrator") get Description,Name,PasswordExpires,Status /format:htable >>"C:\Report\INFO.htm
wmic UserAccount where (Name="Guest") get Description,Name,PasswordExpires,Status /format:htable >>"C:\Report\INFO.htm

Rem ====GET INFO 5=========================
gpresult /H C:\Report\LocalPolicy.html

Rem ====GET INFO 6================
reg query HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v restrictanonymous >>"C:\Report\regedit.html
rem reg query HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg >>"C:\Report\regedit.html
reg query HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v DisableIPSourceRouting >>"C:\Report\regedit.html
reg query HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v PerformRouterDiscovery >>"C:\Report\regedit.html

Rem ==== GET INFO 7=======================
wmic service where (Name="WerSvc") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm

Rem ====GET INFO 8=================================
wmic service where (Name="Browser") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
wmic service where (Name="wuauserv") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
wmic service where (Name="lmhosts") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm

Rem ====GET INFO 9=====================
w32tm /query /status >>"C:\Report\regedit.html

Rem ====GET INFO 10================
wmic qfe get Description, HotFixID, InstalledBy, InstalledOn /format:htable >>"C:\Report\INFO.htm
wmic qfe where (HotFixID="KB4056895") get Description, HotFixID, InstalledBy, InstalledOn /format:htable >>"C:\Report\INFO.htm
wmic qfe where (HotFixID="KB4088876") get Description, HotFixID, InstalledBy, InstalledOn /format:htable >>"C:\Report\INFO.htm

Rem ====GET INFO 11========================

wmic service where (Name="masvc") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
wmic service where (Name="HipMgmt") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
wmic service where (Name="McShield") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
wmic service where (Name="enterceptAgent") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
wmic service where (Name="scsrvc") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm

Rem ====GET INFO 12===============
wmic service where (Name="arc_Connector") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
wmic service where (Name="arc_windowsunified") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
wmic service where (Name="arc_windowsfg") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
wmic service where (Name="arc_nt_local") get caption,name,startmode,state /format:htable >>"C:\Report\INFO.htm
PreviousINSTALL AND MANAGE MULTIPLE JAVA JDK AND JRE VERSIONS ON UBUNTUNextAuto Install Openvpn

Last updated 2 years ago

Was this helpful?