Original Publish - https://aksheet10.medium.com/powerview-common-commands-60f9a9ad6a80
https://github.com/PowerShellEmpire/PowerTools/blob/master/PowerView/powerview.ps1
Save this in a notepad as PowerView.ps1
Open Command Promt as administrator
powershell -ep bypass
. .\PowerView.ps1
Get-NetDomain
or Get-Domain
- Information about the domain
Get-NetDomainControllers
- Get all the domains
Get-DomainPolicy
Get-NetUser
/ Get-DomainUser
- Both are similar
Get-DomainUser -Properties cn,description
is same as Get-NetUser | select cn, description
Get-NetUser "name"
is same as Get-DomainUser "name"
Get-NetGroupMember "Domain Admins"
Get-NetGroup
or Get-DomainGroup
- Get all the groups
Get-NetGroup "Domain Admins"
or Get-DomainGroup "Domain Admins"
- Gets specific group
Get-DomainComputer | select cn, dnshostname
also same as Get-NetComputer | select cn, dnshostname
Invoke-ShareFinder
- Shows all the shares
Get-NetComputer -Properties samaccountname
same as Get-DomainComputer -Properties samaccountname
Get-NetGPO -Properties displayname,whenchanged
same as Get-DomainGPO -Properties displayname, whenchanged