James Stull

Ever since Windows 7, Microsoft has installed a vbs script in the %systemroot%\System32 directory called GatherNetworkInfo.vbs. This script makes quick work when you need to gather information about a system and the network it's attached to. Because it's a default part of Windows, signed by Microsoft, and in the system path it's a tool you always know is there. However, as with any tool, it can be handy to both Sysadmin and Red Teamer, or abused by attackers needing a quick way to learn more about your network. What does it gather? When researching a feature in Windows you typically can find a Microsoft Docs, Technet article, or even an MVP blog post about it. However, in this case, I couldn't find anything. I did, however, find a blog post back in 2011 by Alex Verboon discussing this script . He referenced this 2010 Sans Whitepaper (PDF Link) that briefly discussed this script on page 9 and summarized what it does down to this: The script’s voluminous output ...

Passwords are something that we all have and cannot avoid if we have a digital life. Every device we own and work with asks for one such as our laptops, phones, and tablets. Nearly every website we visit demands we create one. At work, you have, not only your computer, but business applications, network devices, and a myriad of other systems/applications that require passwords. Passwords are the virtual keys we need to unlock and secure everything we own and use in our virtual lives. We need them. Unfortunately, it's also because of their widespread use we hate them. The average person has nearly 30 logins to keep track of. I have over 50 that I use and that doesn't include what I have at work. Because of this growth, many have gotten sloppy and use the same password over and over for multiple services. Many times they will use simple dictionary based words or names of children, birthdates, or other things that are easy for attackers to find and research from their victim...