SharpView

SharpView is a .NET/C# port of PowerView that exposes the same function names and parameters as a compiled executable, useful when PowerShell is locked down (Constrained Language Mode, AMSI/logging on script hosts) but arbitrary binaries still run. Each PowerView function becomes a positional first argument, and switches keep their PowerView names. It is handy for one-shot enumeration such as pulling kerberoastable accounts or interesting ACLs from a beacon. Command Reference: Domain: test.local

# Kerberoastable accounts
SharpView.exe Get-DomainUser -SPN
# AS-REP roastable accounts
SharpView.exe Get-DomainUser -PreauthNotRequired
# Interesting ACLs with resolved GUIDs
SharpView.exe Find-InterestingDomainAcl -ResolveGUIDs

Evidence

Upstream reference

Environment

Active Directory

Native

Enumeration, Discovery

Requires

Shell

Services

LDAP

Refs

github.com/tevora-threat/SharpView

github.com/PowerShellMafia/PowerSploit

book.hacktricks.xyz/windows-hardening/active-directory-methodology