BreadCrumbs: Remote User Discovery

Remote User Discovery

From Luke Jackson

Jump to: navigation, search

Contents

Summary

This is a simple explaination on how to determin the current user of a remote Windows system.

Windows XP SP1 <

nbtstat -a <computername>

Windows XP SP2 >

tasklist /v /s <computername> /fi "IMAGENAME eq explorer.exe"

or

qwinsta console /server:<computername>

Task List

tasklist /s gbg-qcd-orange /fi "IMAGENAME eq firefox.exe"
Personal tools