Skip to content

默认以管理员运行 #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
raoyi wants to merge 2 commits into
base: main
Choose a base branch
from
Open

默认以管理员运行 #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5ccdc82
默认以管理员运行
raoyi Sep 25, 2024
fb23c88
FirewallShowConfig已弃用
raoyi Sep 25, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,9 @@
# Winscan
一键Windows应急响应检测脚本

![](https://mmbiz.qpic.cn/mmbiz_png/vJDso0DHzQ2HzzZcHJuGA3O2TsIXsAv1OIuJFVtb0Hibj866AVk8ARRR0rUf9VXiciaJBHImKicXZyCXkT8GPA8zfQ/640?wx_fmt=png&from=appmsg&wxfrom=13&tp=wxpic)
#### 实现功能：
---
说明：运行本脚本需要管理员权限。
说明：此脚本将自动以管理员权限运行。

信息收集相关：
+ 操作系统信息
Expand Down
21 changes: 19 additions & 2 deletions Winscan.bat
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,20 @@
@echo off
color 0f
rem check if runas admin or not
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"

if '%errorlevel%' NEQ '0' (
echo get admin permission...
goto UACPrompt
) else ( goto main )

:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %*", "", "runas", 1 >> "%temp%\getadmin.vbs"
"%temp%\getadmin.vbs"
exit /B

:main
::call:colorys���õײ�:colorys
::02Ϊ��ɫ���ã�0ָ��������ֱ�����ɫ��2ָ��������ɫ
::������ܰ������� / : ? * " > < | \
Expand Down Expand Up @@ -64,8 +79,10 @@ call:colorys 0A "[+]
wmic /namespace:\\root\securitycenter2 path antivirusproduct GET displayName,productState, pathToSignedProductExe
@echo.
call:colorys 0A "[+] ������ǽ���ã���д���ļ���"
netsh firewall show config
netsh firewall show config > firewall_config.txt
::netsh firewall show config
::netsh firewall show config > firewall_config.txt
netsh advfirewall firewall show rule name=all
netsh advfirewall firewall show rule name=all > firewall_config.txt
@echo.
call:colorys 0A "[+] ���Defender��⵽�Ļ�͹�ȥ�Ķ���������в��"
@echo.
Expand Down