Linux command
impacket-getarch 命令
文件
复制后可按需替换文件名、目录或参数。
常用示例
Detect the architecture
impacket-getarch -target [192.168.1.100]
Check architecture
impacket-getarch -targets [targets.txt]
Detect architecture
impacket-getarch -target [192.168.1.100] -timeout [5]
Detect architecture
impacket-getarch -target [192.168.1.100] -debug
说明
impacket-getarch is a reconnaissance tool that determines whether a remote Windows system is running a 32-bit or 64-bit operating system. It works by connecting to the target's SMB service and analyzing differences in how 32-bit and 64-bit Windows respond to certain SMB requests. This technique is documented by Microsoft and requires no authentication. This information is valuable during penetration testing when preparing architecture-specific payloads or exploits.
参数
- -target _IP_
- IP address of the target system to probe
- -targets _FILE_
- File containing a list of target IP addresses (one per line)
- -timeout _SECONDS_
- Socket timeout when connecting to the target (default: 2)
- -debug
- Enable debug output
- -ts
- Add timestamp to every logging output
FAQ
What is the impacket-getarch command used for?
impacket-getarch is a reconnaissance tool that determines whether a remote Windows system is running a 32-bit or 64-bit operating system. It works by connecting to the target's SMB service and analyzing differences in how 32-bit and 64-bit Windows respond to certain SMB requests. This technique is documented by Microsoft and requires no authentication. This information is valuable during penetration testing when preparing architecture-specific payloads or exploits.
How do I run a basic impacket-getarch example?
Run `impacket-getarch -target [192.168.1.100]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -target _IP_ do in impacket-getarch?
IP address of the target system to probe