forked from pwnwiki/pwnwiki.github.io
-
Notifications
You must be signed in to change notification settings - Fork 0
Wiki contributor
Rob Fuller edited this page Nov 30, 2013
·
2 revisions
Just some notes on how to contribute:
- Please make pull requests of any changes. If you have commit rights, please wait 24 hours before committing your own pull request, but feel free to have another committer review and merge your request sooner.
- When you do push to master, sync gh-pages using the setup detailed here: http://brettterpstra.com/2012/09/26/github-tip-easily-sync-your-master-to-github-pages/
In many cases, the content being placed into the wiki will be in a consistent form. Please use the following guide to creating your pages.
-
Command:
[command(s)]
-
Command with arguments:
[command(s) w/flags or switches]
- Description: [tell what the purpose is]
-
Output:
-
**[OS you got the output from]:** Show/Hide
[sample output goes here]
-
Below is an example
-
Command:
whoami
-
Command with arguments:
whoami /all
- Description: Lists information about the user you are currently logged in as. Helpful for showing what groups, sid and privileges of this user. Not available in all versions of Windows but is in Windows Vista and more recent. According to Wikipedia, this command can be added to Windows 2000 using the resource kit and is installed in Windows XP SP2 Support Tools.
-
Output:
-
**Windows 2008:** Show/Hide
C:\Users\johndoe>whoami
lab\johndoe
C:\Users\johndoe>whoami/all
USER INFORMATION
----------------
User Name SID
=========== ===========================================
lab\johndoe S-1-5-21-60789211-843652525-1994898995-1001
GROUP INFORMATION
-----------------
Group Name Type SID Attributes
========================================== ================ ============ ==================================================
Everyone Well-known group S-1-1-0 Mandatory group, Enabled by default, Enabled group
BUILTIN\Users Alias S-1-5-32-545 Mandatory group, Enabled by default, Enabled group
BUILTIN\Administrators Alias S-1-5-32-544 Group used for deny only
BUILTIN\Pre-Windows 2000 Compatible Access Alias S-1-5-32-554 Group used for deny only
NT AUTHORITY\INTERACTIVE Well-known group S-1-5-4 Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\Authenticated Users Well-known group S-1-5-11 Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\This Organization Well-known group S-1-5-15 Mandatory group, Enabled by default, Enabled group
LOCAL Well-known group S-1-2-0 Mandatory group, Enabled by default, Enabled group
Mandatory Label\Medium Mandatory Level Unknown SID type S-1-16-8192 Mandatory group, Enabled by default, Enabled group
PRIVILEGES INFORMATION
----------------------
Privilege Name Description State
============================= ==================================== ========
SeShutdownPrivilege Shut down the system Disabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled
-