Define the password length and quantity of special characters.
1 2 3 4 | Add-Type -AssemblyName System.Web $PasswordLength = 24 $SpecialCharCount = 3 [System.Web.Security.Membership]::GeneratePassword($PasswordLength, $SpecialCharCount) |
Namecheap Dynamic DNS (DDNS) Looping Updater PowerShell Script
This script will loop endlessly and update your hosts with NameCheap’s Dynamic DNS (DDNS) service at the interval you specify.
It also verifies and outputs the status response from NameCheap so you’ll know if the update was successful, or if not, why.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 | # Namecheap DDNS Updater Script # A one file looping script that updates your hosts every X minutes. # Created by: https://FrontRunnerTek.com # Version 1.0 # Some bits sourced from: https://gist.github.com/dredix/3508143 # :: Settings # ::::: General # ::::::: Update Frequency In Minutes $UpdateFreq = 15 # ::::::: Force Update even if IP hasn't changed $ForceUpdate = $false # ::::: Proxy $ProxyEnabled = $false # Use Proxy? $true or $false $ProxyAddress = "" # Proxy IP Address $ProxyPort = "" # Proxy Port $ProxyDomain = "" # Proxy Domain Name $ProxyUser = "" # Proxy Username $ProxyPassword = "" # Proxy Password # ::::: Domain Configs # DDNSSubdomain = Host. The subdomain name or if root domain, use '@'. # DDNSDomain = Domain. The root domain name you are updating. # DDNSPassword = Dynamic DNS Password. Unique to each Domain Name - NOT your account password! # Duplicate DomainX entries for as many as you need. Add each DomainX variable to the ArrayList below $Domain1 = [pscustomobject] @{ DDNSSubdomain = "sub" DDNSDomain = "domain.com" DDNSPassword = "040vacdsbcf7dsfae85850a07d2435296f7" } $Domain2 = [pscustomobject] @{ DDNSSubdomain = "sub2" DDNSDomain = "domain.com" DDNSPassword = "040vacdsbcf7dsfae85850a07d2435296f7" } # :::: Add each DomainX variable to this list [System.Collections.ArrayList]$Domains = @($Domain1,$Domain2) #================= END CONFIG - TOUCH NOTHING BELOW ==================================== CLS # Ok, if you want to touch something, you can adjust this file path $logFile = "C:\Users\Public\DDNSupdate_$(Get-Date -Format yyyy-MM-dd_HH_mm_ss).txt" # But that's as far as you go. <img draggable="false" class="emoji" alt="" src="https://s.w.org/images/core/emoji/2.4/svg/1f609.svg"> $breakOut = $false # Write a message to log. function Log-Message ($MSG) { $script:Logger += "$(get-date -format u) $MSG`r`n" Write-Output $MSG } # Write an error to log. function Log-Error ($MSG) { $script:Logger += "$(get-date -format u) ERROR`: $MSG`r`n" Write-Output "ERROR`: $MSG" } $Logger = "" Log-Message "Namecheap Dynamic DNS Update Client Log" Do { $client = New-Object System.Net.WebClient if ($ProxyEnabled) { $proxy = New-Object System.Net.WebProxy $proxy.Address = $ProxyAddress if ($ProxyPort -and $ProxyPort -ne 80) { $proxy.Address = "$ProxyAddress`:$ProxyPort" } else { $proxy.Address = $ProxyAddress } $account = New-Object System.Net.NetworkCredential($ProxyUser, $ProxyPassword, $ProxyDomain) $proxy.Credentials = $account $client.Proxy = $proxy } $client # Get current public IP address Log-Message "Retrieving the current public IP address" $Pattern = '\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}' $CurrentIp = $client.DownloadString('http://myip.dnsomatic.com/') Log-Message "Retrieving stored IP address" $StoredIp = [Environment]::GetEnvironmentVariable("PUBLIC_IP","User") if (!($CurrentIp -match $Pattern)) { Log-Error "A valid public IP address could not be retrieved" } Log-Message "Stored IP: [$StoredIp] Retrieved IP: [$CurrentIp]" # Compare current IP address with environment variable. if ($StoredIp -eq $CurrentIp -and $ForceUpdate -eq $false) { Log-Message "No update required. IP hasn't changed. Not forcing Update." }Else{ ForEach ($domain in $Domains){ Log-Message "Updating IP address on domain registrar for $($domain.DDNSSubdomain) @ $($domain.DDNSDomain)" #https://dynamicdns.park-your-domain.com/update?host=SUBDOMAIN&domain=YOURDOMAIN&password=0123456789ABCDEF&ip=$CurrentIp $DDNSSubdomain = $domain.DDNSSubdomain $DDNSDomain = $domain.DDNSDomain $DDNSPassword = $domain.DDNSPassword $UpdateUrl = "https://dynamicdns.park-your-domain.com/update?host=$DDNSSubdomain&domain=$DDNSDomain&password=$DDNSPassword&ip=$CurrentIp" $UpdateDDNS = $client.DownloadString($UpdateUrl) # Actually verify we have a good update or not $response = $UpdateDDNS If ($response.'interface-response'.ErrCount -eq 0){ Log-Message "Update of $($domain.DDNSSubdomain) @ $($domain.DDNSDomain) was successful at Namecheap.com" }Else{ Log-Message "Update of $($domain.DDNSSubdomain) @ $($domain.DDNSDomain) failed" Log-Error $response.'interface-response'.errors.Err1 } Log-Message "$UpdateDDNS" [Environment]::SetEnvironmentVariable("PUBLIC_IP", $CurrentIp, "User") Log-Message "Environment variable set: $CurrentIp" } } # Sleep until next interval Log-Message "Sleeping for $UpdateFreq minutes. Press CTRL+C to Quit." sleep -Seconds ($UpdateFreq * 60) } Until ($breakOut -eq $true) |
Active Directory Auto-Generate Username
If you need to generate and test for an available username in Active Directory, this script will allow you to do so up to a specified maximum attempts before requiring manual input. Each loop adds a letter from the first name to the last name for the username. JWayne, JoWayne, JohWayne, JohnWayne.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 | CLS $firstName = "John" $lastName = "Wayne" $Global:attempts = 0 $Global:available = $false $Global:finalName = $null Function Test-SAM { $samAccountName = $($firstName.Substring(0, (1 + $Global:attempts)) + $(($lastName.Split() | select -Last 1) -join ' ')) Write-Host "Testing $samAccountName" Try { $userTest = Get-ADUser $samAccountName -ErrorAction SilentlyContinue }Catch{ # Ignore Error - Available Username $Global:available = $true $Global:finalName = $samAccountName } } Do { Test-SAM $Global:attempts +=1 } Until ($Global:available -eq $true -and $Global:attempts -le $firstName.Length -and $Global:attempts -le 2) #specify max attempts here If (!$Global:finalName){ Write-Host "Could not automagically generate a username, please manually input one below..." # do stuff here # }Else{ Write-Host "Automagically generated username: $Global:finalName" # do stuff here # } |
Install all drivers in folder – automagically
Specify the folder which contains all the drivers you wish to have installed. Adjust the -recurse option as needed.
1 2 3 4 5 6 | $driversFolder = "C:\xtraDrivers" $driversCollection = (Get-ChildItem -Path $driversFolder -Filter "*.inf" -Recurse -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Fullname) ForEach($driver In $driversCollection){ # Add and install driver package pnputil.exe -i -a $driver } |
PowerShell Tail – Watch log file as data is appended by script
Add this snippet to any script which writes to a log file, and it will open a second PowerShell console window with which you can watch the logfile as it is updated in real-time.
1 2 | $Logfile = "$env:systemroot\Temp\$Logname.log" Start-Process -FilePath $pshome\powershell.exe -ArgumentList @("-NoExit","&amp;`{Get-Content -LiteralPath $Logfile -Tail 50 -Wait`}") |
Disable TCPIPv6 on all network adapters
1 | Get-NetAdapterBinding | where {$_.ComponentID -eq "ms_tcpip6"} | Disable-NetAdapterBinding -ComponentID ms_tcpip6 |
Start-Transcript – Execute only if in console and not ISE
Due to functionality differences between the PowerShell console and PowerShell ISE, there are times you only want to run certain functions and/or commands if the script is running in a console window. Below is an example of how to do so.
1 2 3 4 5 6 | # Log script output to file - only works in console, not ISE. If ($host.Name -notlike "*ISE*"){ $scriptLog = "dcpromo_$(Get-Date -f yyyy-MM-dd_HH_mm_ss).log" $logging = Start-Transcript -Path $scriptLog Write-Host "`tTranscript started, logging to: $($logging.Path)" -ForegroundColor Cyan } |
Remotely search AD FS event logs of all ADFS Servers for specific UPN
This script enables you to remotely search the event logs of all ADFS servers for a particular UPN (email address) and log those events, and optionally related events based on the InstanceIDs.
Configure $servers to reflect the ADFS servers you wish to query.
Configure $queryXTRA per your requirement for the extra logs based on the InstanceID
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 | # ADFS Event Log Query - Search by UPN cls $start = (Get-Date).AddHours(-96) #$start = [datetime]"3/28/2018 2:00:00 PM" # "3/27/2018 11:00:00 AM" $end = Get-Date #$end = [datetime]"3/28/2018 4:00:00 PM" # "3/27/2018 11:30:00 AM" $logfile = "C:\users\public\ADFSlogging_$(Get-Date -f yyyy-MM-dd_HH_mm_ss).txt" $xmlfile = "C:\users\public\ADFSlogging_$(Get-Date -f yyyy-MM-dd_HH_mm_ss).xml" $servers = "server1.domain.com", "server2.domain.com" $queryXTRA = $true # $true / $false ; Queries and logs the additional associated events based on the activityID / transactionID #================================================================================================================================== $xtraInstances = New-Object System.Collections.ArrayList Add-Content -Path $xmlfile -Value "<xml>" -Encoding Ascii # START UPN Search $searchInput = Read-Host -Prompt "Enter UPN to query (username@domain.com)" Add-Content -Path $logfile -Value "Searching for UPN: $searchInput" ForEach ($server in $servers){ Write-Host ":::: Processing $server..." -ForegroundColor Yellow Add-Content -Path $logfile -Value ":::: Processing $server..." $events = Get-WinEvent -FilterHashtable @{Logname = 'security'; Data = $searchInput; ProviderName = 'AD FS Auditing'; StartTime = $start; EndTime = $end} -ComputerName $server -ErrorVariable EvtERR -ErrorAction SilentlyContinue If (!$EvtERR){ ForEach ($entry in $events){ $event = [xml]$entry[0].ToXml() $InstanceID = $event.Event.EventData.Data[0] $upn = $entry.Message -match [regex]::Escape($searchInput) # "\w+(-+.']\w+)*@domain\.com" # optional regex for matching domain email / upn $timestamp = $entry.TimeCreated $eventID = $entry.Id If ($upn){ Add-Content -Path $logfile -Value "MSG: $($entry.Message)" Write-Host "UPN: $($matches[0])`tEventID: $eventID`tTimestamp: $timestamp`tInstanceID: $InstanceID" -ForegroundColor Cyan Add-Content -Path $logfile -Value "UPN: $($matches[0])`tEventID: $eventID`tTimeStamp: $timestamp`tInstanceID: $InstanceID" Add-Content -Path $logfile -Value ":::: =================================================================== ::::" If ($queryXTRA -eq $true){ If ($xtraInstances -notcontains $InstanceID){ $xtraInstances.Add($InstanceID) } } } } }Else{ #Add-Content -Path $logfile -Value $EvtERR } # poll extra events If ($queryXTRA -eq $true){ ForEach ($Instance in $xtraInstances){ # Query logs for InstanceID $xEvents = Get-WinEvent -FilterHashtable @{Logname = 'security'; Data = $Instance; ProviderName = 'AD FS Auditing'; StartTime = $start; EndTime = $end} -ComputerName $server -ErrorVariable xEvtERR -ErrorAction SilentlyContinue If (!$xEvtERR){ Write-Host "Found extra events for $Instance" -ForegroundColor Yellow $xEvents.count ForEach ($entry in $events){ $event = [xml]$entry[0].ToXml() Add-Content -Path $xmlfile -Value $event.InnerXML.Replace('<Data>-</Data>','') -Encoding Ascii } } } } } # END UPN Search Add-Content -Path $xmlfile -Value "</xml>" -Encoding Ascii start $logfile start $xmlfile |
PowerShell PIA VPN Port Forwarding Assignment Reservation Script
This script will loop continuously and keep your port forwarding assignment updated and assigned to your IP while you are connected to the Private Internet Access VPN (PIA VPN).
Configure the $user, $pass, and $clientID variables per your PIA account information. The result from the webrequest which contains the assigned port will be written to the PowerShell console. You must be connected to the PIA VPN before running this script.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 | # PowerShell Private Internet Access (PIA) VPN Port Forwarding Assignment Reservation Script # POST to: https://www.privateinternetaccess.com/vpninfo/port_forward_assignment # Vars: user=username # pass=password # client_id=a random string that no one should be able to guess, use the same string every time # local_ip=the 10.x.x.x IP you get assigned after connecting to the VPN $user = 'user' $pass = 'pwd' $clientID = '2vn03242435fvdfasc349c234' $i="go" Do { cls $timestamp = (Get-Date –f o) $ip2=get-WmiObject Win32_NetworkAdapterConfiguration|Where {$_.Ipaddress.length -gt 1 -and $_.Description -like "*TAP-Windows Adapter V9*" } $ip = $ip2.ipaddress[0] $postParams = @{user=$user;pass=$pass;client_id=$clientID;local_ip=$ip} $info = Invoke-WebRequest -Uri https://www.privateinternetaccess.com/vpninfo/port_forward_assignment -Method POST -Body $postParams Write-Host $info.Content Write-Host "$timestamp | sleeping..." sleep -Seconds 3200 $i = "go" }while ($i = "go") |
Multi-Threaded Remote Net Shares Report For Domain Contollers In Forest
This script generates a report of shares on domain controllers which are not in the allowed list, allowing you to find shares which rogue admins have created.
Change domain.com to your forest name.
Adjust the shares allowed if required.
Adjust the maxThread variable as required.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 | # Shares Report Script # Configure max threads and invalid share / error logging file path # The query filters on the remote side so less data transfer across the WAN is required # Once the jobs are done, a report will auto-open in Notepad to display the invalid shares found #============================================================================== #= OPTIONS ==================================================================== $maxThread = 30 $invalidSharesLog = "C:\Users\Public\InvalidShares_$(Get-Date -f yyyy-MM-dd_HH_mm_ss).txt" #============================================================================== CLS Stop-Job *; Remove-Job * $allDCs = New-Object System.Collections.ArrayList; $allJobs = New-Object System.Collections.ArrayList $doneJobs = New-Object System.Collections.ArrayList; $DCsToProcess = New-Object System.Collections.ArrayList $start = Get-Date If (Test-Path $invalidSharesLog){del $invalidSharesLog} (Get-ADForest -Server 'domain.com').Domains | % { $DCs = Get-ADDomainController -Server $_ -Filter * ForEach ($DC in $DCs) { Write-Host "Found $($DC.Name).$_ to process..." -ForegroundColor Cyan $null = $allDCs.Add("$($DC.Name).$_") } } Write-Host "Found $($allDCs.Count) Domain Controllers to process..." -ForegroundColor Yellow $DCcount = $allDCs.Count $DCsToProcess = $allDCs Do { Write-Host "Current Jobs: $($allJobs.count)" If ($allJobs.Count -le $maxThread){ $addMore = ($maxThread - $allJobs.Count) ForEach ($DC in ($DCsToProcess | Select-Object -First $addMore)){ $newJob = Start-Job -ScriptBlock { param ([string]$DC) $shares = Get-WmiObject -ComputerName $DC -ClassName Win32_Share -Filter ` "` Not Name like 'ADMIN$' and ` Not Name like 'C$' and ` Not Name like 'D$' and ` Not Name like 'IPC$' and ` Not Name like 'NETLOGON' and ` Not Name like 'SYSVOL' ` " ` -ErrorVariable shareERR -ErrorAction SilentlyContinue; If ($shares -eq $null -and -not $shareERR){ Write-Output "STATUS: $($DC): No Invalid Shares Found" }ElseIf ($shareERR){ Write-Output "ERROR: $($DC): $($shareERR | Out-String)" }Else{ Write-Output "ERROR: $($DC): Invalid Shares Found`n$($shares | Out-String)" } } -ArgumentList $DC Write-Host "Started Job for $DC..." -ForegroundColor Cyan $null = $allJobs.Add($newJob.Id) $null = $DCsToProcess.Remove($DC) } } ForEach ($job in $allJobs){ If ($doneJobs -notcontains $job){ $status = Get-Job -id $job If ($status.State -eq 'Completed' -and $status.HasMoreData -eq 'True'){ $end = Get-Date $dateDiff = New-TimeSpan $start $end $minutes = $dateDiff.Minutes $seconds = $dateDiff.Seconds Write-Host "Time Elapsed: $($minutes)m $($seconds)s" -ForegroundColor Cyan Do{ $result = Receive-Job -id $job If ($result -like "ERROR:*"){ Write-Host $result -ForegroundColor Red $result | Out-File -Append -FilePath $invalidSharesLog }Else{ Write-Host $result -ForegroundColor Green } }Until($result -eq $null) $null = stop-job -Id $job;$null = Remove-Job -Id $job; $null = $doneJobs.Add($job) } sleep -s 1 } } ForEach ($done in $doneJobs){ $allJobs.Remove($done) } Write-Host "Completed Jobs: $($doneJobs.count)" -ForegroundColor Cyan } Until ($doneJobs.count -eq $DCcount) Write-Host "Processing is complete" -ForegroundColor Yellow Stop-Job *; Remove-Job * start notepad.exe $invalidSharesLog |