ambro Posted September 20, 2013 Share Posted September 20, 2013 (edited) Hello all, This is just a small bit of logic to pull the architecture type from the machine and based on that, perform different functionality calls IE: for Mimikatz using both the 32 / 64 bit versions or with procdump specifying -64 for 64 bit machines or not... etc. STRING wmic computersystem get SystemType | find "x64" >nul&& (set "SystemType=64bit") || (set "SystemType=32bit") Anyhow, you'd put in logic after this which would run your different executable based on the %SystemType% var I'll write up a full demo script in a bit for those of you wanting an example. Thank you. Enjoy! Edited September 20, 2013 by ambro Quote Link to comment Share on other sites More sharing options...
overwraith Posted September 20, 2013 Share Posted September 20, 2013 Found this related page. I am sure one of these commands will work on previous versions of windows. Am interested in finding a way to do this that is more "cross platform" but still windows only. http://superuser.com/questions/96092/how-can-i-determine-if-the-current-version-of-windows-is-either-32-bit-or-64-bit Quote Link to comment Share on other sites More sharing options...
ambro Posted September 20, 2013 Author Share Posted September 20, 2013 AFAIK WMI from the command prompt works on Windows 2000, Windows XP, Windows 2003, Windows Vista, Windows 2008, 7 , 8 When you say more cross platform do you mean absent WMI? Quote Link to comment Share on other sites More sharing options...
overwraith Posted September 21, 2013 Share Posted September 21, 2013 Are you sure? the whole point in googleknowsbets's code change was that his computer didn't have wmic. The code change I am referring to is the for loop that is used to find the ducky. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.