Skip to content
/ netview Public

Netview enumerates systems using WinAPI calls

License

Notifications You must be signed in to change notification settings

mubix/netview

Folders and files

NameName
Last commit message
Last commit date

Latest commit

c6a3f69 · Jan 30, 2022

History

42 Commits
Nov 5, 2021
Aug 31, 2012
Aug 31, 2012
Jul 2, 2020
Nov 29, 2020
Sep 12, 2012
May 6, 2016
Aug 31, 2012
May 6, 2016
Sep 12, 2012
Jan 30, 2022

Repository files navigation

netview

Netview is a enumeration tool. It uses (with the -d) the current domain or a specified domain (with the -d domain) to enumerate hosts. You can also use the -f if you wish to specify a file with a list of hosts instead. Any hostnames you wish to exclude can be specified in a list with -e. If you want to query for a domain group and highlight where those users are logged in from, specify the group with -g.

Info: http://web.archive.org/web/20130301022254/http://www.room362.com/blog/2012/10/8/compiling-and-release-of-netview.html

Compiled version: https://github.com/mubix/netview/releases

Once a list is gathered, netview check each for the following + IP addresses + Shares + Sessions (users connected to the machine from a remote source) + and Logged on users

All output can be redirected to a file with the '-o' argument. Access to found shares can be checked with -c.

Additionally, a delay (in seconds) between host enumerations can be specified with -i, and a percent jitter (0.0-1.0) to randomize the interval can be specified with -j.

Example output

no arguments

C:\>netview.exe

Netview Help
--------------------------------------------------------------------

-h                      : Display this help menu
-f filename.txt         : Specifies a file to pull a list of hosts from
-e filename.txt         : Specifies a file of hostnames to exclude
-o filename.txt         : Out to file instead of STDOUT
-d domain               : Specifies a domain to pull a list of hosts from
                          uses current domain if none specified
-g group                : Specify a group name for user hunting
                          uses 'Domain Admins' if none specified
-c                      : Check found shares for read access
-i interval             : Seconds to wait between enumerating hosts
-j jitter               : Percent jitter to apply to the interval (0.0-1.0)

-d / -d with domain / or -f with filename

C:\>netview.exe -d

[*] -d used without domain specifed - using current domain
[+] Number of hosts: 1

[+] Host: HOST1

Enumerating AD Info
[+] HOST1 - Comment -
[+] HOST1 - OS Version - 6.1
[+] HOST1 - MSSQL Server

Enumerating IP Info
[+] HOST1 - IPv6 Address - fe80::(removed from example)%10
[+] HOST1 - IPv6 Address - fe80::(removed from example)%15
[+] HOST1 - IPv6 Address - fe80::(removed from example)%12
[+] HOST1 - IPv4 Address - 172.16.10.50
[+] HOST1 - IPv4 Address - 192.168.56.1
[+] HOST1 - IPv6 Address - 2001:(removed from example)

Enumerating Share Info
[+] HOST1 - Share - ADMIN$              Remote Admin
[+] HOST1 - Share - C$                  Default share
[+] HOST1 - Share - Backups
[+] HOST1 - Share - Finance
[+] HOST1 - Share - IPC$                Remote IPC
[+] HOST1 - Share - print$              Printer Drivers
[+] HOST1 - Share - SharedPrinter       Kyocera 5112

Enumerating Session Info
[+] HOST1 - Session - MUBIX from \\172.16.10.207 - Active: 48 - Idle: 44

Enumerating Logged-on Users
[+] HOST1 - Logged-on - HOST1\mubix
[+] HOST1 - Logged-on - HOST1\mubix