.NET executable: SharpView
Execution through Cobalt Strike:
execute-assembly /pipe/SharpView/x64/4.5/SharpView.exe Find-LocalAdminAccess
PowerShell: Find-LocalAdminAccess (PowerView)
- Use master branch if
-NoPingneeded
Start-Transcript 07-01.findlocaladmin.script
Find-LocalAdminAccess
Example with specifying a list of computers AND providing creds:
$cred = street-cred -UserName 'DOMAIN\User' -Password 'Password123'
$targets = ($(get-content .\domain-computers-sorted.txt))
Find-LocalAdminAccess -Credential $cred -ComputerName $targets