tags: Global_network_inventory enumerazione


Global Network Inventory is used as an audit scanner in zero deployment and agent-free environments. It scans single or multiple computers by IP range or domain, as defined by the Global Network Inventory host file.

Here, we will use the Global Network Inventory to enumerate various types of data from a target IP address range or single IP.

  1. Click Windows 11 to switch to the Windows 11 machine, Click Search icon ( search7icon.jpg) on the Desktop. Type Global in the search field, the Global Network Inventory appears in the results, click Open to launch it.

    Screenshot

    If a User Account Control pop-up appears, click Yes.

  2. The About Global Network Inventory wizard appears; click I Agree.

    Screenshot

  3. The Global Network Inventory GUI appears. Click Close on the Tip of the Day pop-up.

    Screenshot

  4. The New Audit Wizard window appears; click Next.

    Screenshot

  5. Under the Audit Scan Mode section, click the Single address scan radio button, and then click Next.

    You can also scan an IP range by clicking on the IP range scan radio button, after which you will specify the target IP range.

    Screenshot

  6. Under the Single Address Scan section, specify the target IP address in the Name field of the Single address option (in this example, the target IP address is 10.10.1.22); Click Next.

    Screenshot

  7. The next section is Authentication Settings; select the Connect as radio button and enter the Windows Server 2022 machine credentials (Domain\Username: Administrator and Password: ), and then click Next.

    In reality, attackers do not know the credentials of the remote machine(s). In this situation, they choose the Connect as currently logged on user option and perform a scan to determine which machines are active in the network. With this option, they will not be able to extract all the information about the target system. Because this lab is just for assessment purposes, we have entered the credentials of the remote machine directly.

    Screenshot

  8. In the final step of the wizard, leave the default settings unchanged and click Finish.

    Screenshot

  9. The Scan progress window will appear.

    Screenshot

  10. The results are displayed when the scan finished. The Scan summary of the scanned target IP address (10.10.1.22) appears.

    The scan result might vary when you perform this task.

    Screenshot

  11. Hover your mouse cursor over the Computer details under the Scan summary tab to view the scan summary, as shown in the screenshot.

    A.jpg

  12. Click the Operating System tab and hover the mouse cursor over Windows details to view the complete details of the machine.

    B.jpg

  13. Click the BIOS tab, and hover the mouse cursor over windows details to display detailed BIOS settings information.

    C.jpg

  14. Click the NetBIOS tab, and hover the mouse cursor over any NetBIOS application to display the detailed NetBIOS information about the target.

    Hover the mouse cursor over each NetBIOS application to view its details.

    D.jpg

  15. Click the User groups tab and hover the mouse cursor over any username to display detailed user groups information.

    Hover the mouse cursor over each username to view its details.

    E.jpg

  16. Click the Users tab, and hover the mouse cursor over the username to view login details for the target machine.

    F.jpg

  17. Click the Services tab and hover the mouse cursor over any service to view its details.

    G.jpg

  18. Click the Installed software tab, and hover the mouse cursor over any software to view its details.

    H.jpg

  19. Click the Shares tab, and hover the mouse cursor over any shared folder to view its details.

    I.jpg

  20. Similarly, you can click other tabs such as Computer SystemProcessorsMain boardMemorySNMP systems and Hot fixes. Hover the mouse cursor over elements under each tab to view their detailed information.