# RemotePS.pl
# ----------------------------------------
# Faz uso do WMI.
# Lista todos os processos de uma máquina remota (Blindows).
# Obviamente temos que ter permissões para isso.
#
# Syntax:
# RemotePS.pl [IP_MACHINE] [domain\user] [password]
#
# IP_MACHINE.....IP da maquina .
#
print "inginheiiro script to hack processes of a BRABOS nest ...\n\n";
use Win32::OLE qw( in );
$Machine = "." unless( $Machine = shift @ARGV );
$Machine =~ s#^[\\/]+## if( $ARGV[0] =~ m#^[\\/]{2}# );
#WMI nova forma...
$wmiwebloc = Win32::OLE->new('WbemScripting.SWbemLocator') ||
die "Não consigo aceder ao WMI na maquina local: ", Win32::OLE->LastError;
$user = shift @ARGV || undef;
$pwd = shift @ARGV || undef;
$wmipath = "root\\cimv2";
$WMI = $wmiwebloc->ConnectServer("$Machine",$wmipath,$user,$pwd) ||
die "Cannot access WMI on local machine: ", Win32::OLE->LastError;
# Venham lá esses processos...
$ProcList = $WMI->InstancesOf( "Win32_Process" );
$~ = PROCESS_HEADER;
write;
$~ = PROCESS_INFO;
foreach $Proc ( sort( SortProcs ( in( $ProcList ) ) ) ){
write;
}
sub SortProcs
{
lc $a->{Name} cmp lc $b->{Name};
}
sub FormataNumeros
{
my( $Number ) = @_;
my( $Suffix ) = "";
my $K = 1024;
my $M = 1024 * $K;
if( $M <= $Number )
{
$Suffix = "M";
$Number /= $M;
}
elsif( $K <= $Number )
{
$Suffix = "K";
$Number /= $K;
}
$Number =~ s/(\.\d{0,2})\d*$/$1/;
{} while ($Number =~ s/^(-?\d+)(\d{3})/$1,$2/);
return( $Number . $Suffix );
}
sub FormataData
{
my( $Date ) = @_;
$Date =~ s/(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2}).*/$1.$2.$3 $4:$5:$6/;
return( $Date );
}
format PROCESS_HEADER =
@||| @||||| @|||||||||||||||| @|||| @|||||| @||||||| @||||||||||||||||||
PID, "PAI", "Nome Processo", "Thrds", "Mem","Mem Peak", "Criado"
---- ------ ----------------- ----- ------- -------- -------------------
.
format PROCESS_INFO =
@||| @||||| @<<<<<<<<<<<<<<<< @>>>> @>>>>>> @>>>>>>> @>>>>>>>>>>>>>>>>>>
$Proc->{'ProcessID'}, $Proc->{'ParentProcessID'}, $Proc->{Name}, $Proc->{'ThreadCount'}, FormataNumeros( $Proc->{'WorkingSetSize'} ), FormataNumeros( $Proc->{'PeakWorkingSetSize'} ), FormataData( $Proc->{'CreationDate'} )
.
Belas recordações.