SharpUserIP - 快速获取域用户登录日志工具

0x01 工具介绍

在域控或远程提取登录日志，快速获取域用户对应的IP地址。

关注【Hack分享吧】公众号，回复关键字【1220】获取下载链接

0x02 使用说明

  ___ _                  _   _            ___ ___
 / __| |_  __ _ _ _ _ __| | | |___ ___ _ |_ _| _ \
 \__ \ ' \/ _` | '_| '_ \ |_| (_-</ -_) '_| ||  _/
 |___/_||_\__,_|_| | .__/\___//__/\___|_||___|_|
                   |_|


Get the log of successful login or the specified user
By @lele

  -H             Specify the machine IP or machine name
  -U             Administrator account name
  -P             Administrator account password
  -D             Specifies the time range for the enumeration
  -F             Enumerate specified users
  -O             Path to save the result, by default save to the log.txt of the current path
  -All           Get logs from all domain controllers

  Usage:
       SharpUserIP.exe -d 7
       SharpUserIP.exe -h ip -d 7
       SharpUserIP.exe -h ip -d 7 -f user1,user2
       SharpUserIP.exe -h ip -u username -p password -d 7
       SharpUserIP.exe -h ip -u username -p password -d 7 -all
       SharpUserIP.exe -h ip -u username -p password -d 7 -f user -o C:\path\result.txt