[KLUG Members] query WMI from Linux

Adam Tauno Williams adam at morrison-ind.com
Fri Jul 8 10:57:11 EDT 2005


> Windows Management Instrumentation (I guessing this has RPC hooks in
> it as well, so I think im reaching... )

I'm not certain all of what WMI encompasses.  *BUT* if I were you I
would sniff a WMI connection,  even if you are a trace-reading gawd a
tool like Ethereal might make some things obvious.

I know that I can use rpcclient (from the Samba package) to do various
things to a workstation such as add/remove shares, add/remove users,
reboot, etc...

ftp://ftp.kalamazoolinux.org/pub/pdf/AbusingWin32.pdf

Active directory can be queried with standard LDAP tools if you have
Kerberos setup.  A trace will make it obvious what query you want to get
the information.

Otherwise I'm told that many of the routines use DCE and OpenDCE can
decode these - if you are familiar with DCE which I am not.

My hunch would be that WMI actually encompasses a mix of all these, as
"ADS" actually means LDAP+Kerberos
+RPC(DCE?)+crappy_old_smb_mailslot_stuff(STILL!).

> On 7/8/05, Adam Tauno Williams <adam at morrison-ind.com> wrote:
> > > Is it possible to query WMI from Linux?
> > WMI?




More information about the Members mailing list