Skip to content

Instantly share code, notes, and snippets.

@MayerDaniel
Created March 15, 2024 17:51
Show Gist options
  • Save MayerDaniel/607459f0b36830f6bf259eaa7c2adfde to your computer and use it in GitHub Desktop.
Save MayerDaniel/607459f0b36830f6bf259eaa7c2adfde to your computer and use it in GitHub Desktop.
capstone step 2 notes
Import-Module -Name NtObjectManager
$rpc = ls C:\Windows\System32\* | Get-RpcServer
$rpc | Where-Object {$_.InterfaceId -eq '4b324fc8-1670-01d3-1278-5a47bf6ee188'} | Format-List
$server = $rpc | Where-Object {$_.InterfaceId -eq '4b324fc8-1670-01d3-1278-5a47bf6ee188'}
$Proc12 = $server.Procedures | Where-Object {$_.ProcNum -eq 12}
$Proc12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment