darnellkeith/PEASS-ng
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update SystemInfo.cs

Browse Source
This commit is contained in:
Carlos Polop 2020-04-27 21:35:07 +01:00 committed by GitHub
parent c325cdb7f7
commit 8d5aed90e6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
winPEAS/winPEASexe/winPEAS/SystemInfo.cs
View File

@ -230,6 +230,8 @@ namespace winPEAS
results["Transcription Settings"] = ""; results["Transcription Settings"] = "";
results["Module Logging Settings"] = ""; results["Module Logging Settings"] = "";
results["Scriptblock Logging Settings"] = ""; results["Scriptblock Logging Settings"] = "";
results["PS history file"] = "";
results["PS history size"] = "";
Dictionary<string, object> transcriptionSettings = MyUtils.GetRegValues("HKLM", "SOFTWARE\\Policies\\Microsoft\\Windows\\PowerShell\\Transcription"); Dictionary<string, object> transcriptionSettings = MyUtils.GetRegValues("HKLM", "SOFTWARE\\Policies\\Microsoft\\Windows\\PowerShell\\Transcription");
if ((transcriptionSettings == null) || (transcriptionSettings.Count == 0)) if ((transcriptionSettings == null) || (transcriptionSettings.Count == 0))
@ -266,6 +268,15 @@ namespace winPEAS
results["Scriptblock Logging Settings"] = String.Format(" {0,30} : {1}\r\n", kvp.Key, kvp.Value); results["Scriptblock Logging Settings"] = String.Format(" {0,30} : {1}\r\n", kvp.Key, kvp.Value);
} }
} }
string ps_history_path = Environment.ExpandEnvironmentVariables(@"%APPDATA%\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt");
if (File.Exists(ps_history_path))
{
FileInfo fi = new FileInfo(ps_history_path);
long size = fi.Length;
results["PS history file"] = ps_history_path;
results["PS history size"] = size.ToString() + "B";
}
} }
catch (Exception ex) catch (Exception ex)
{ {