Catalog WADComs

WAD · Tool

SharpView

1 technique Windows · ActiveDirectoryWADComs GPL-3.0

SharpView-Enumeration

NEW
EnumerationDiscovery WindowsActiveDirectory

SharpView is a .NET/C# port of PowerView that exposes the same function names and parameters as a compiled executable, useful when PowerShell is locked down (Constrained Language Mode, AMSI/logging on script hosts) but arbitrary binaries still run. Each PowerView function becomes a positional first argument, and switches keep their PowerView names. It is handy for one-shot enumeration such as pulling kerberoastable accounts or interesting ACLs from a beacon. Command Reference: Domain: test.local

# Kerberoastable accounts
SharpView.exe Get-DomainUser -SPN
# AS-REP roastable accounts
SharpView.exe Get-DomainUser -PreauthNotRequired
# Interesting ACLs with resolved GUIDs
SharpView.exe Find-InterestingDomainAcl -ResolveGUIDs
Native
Enumeration, Discovery
Requires
Shell
Services
LDAP