Module host_info

host_info is dedicated to reporting information about the host, such as its OS version, role, domain and if the user is a local administrator on it.

Fields

• dns_hostname: The host's FQDN.
• os: The Windows version.
• build: The build number of the OS.
• machine_role: The host's role (DSROLE_MACHINE_ROLE).
• netbios_domain_name: The short name of the domain that the host is joined to, containing a maximum of 15 characters (e.g. CONTOSO).
• domain_name: Same as above, except this is the long name (e.g. CONTOSO.COM).
• smbv1_enabled: Can a client negotiate with this host using SMBv1?
• smb_signing_required: Is SMB signing required when negotiating with this host?
• local_admin: Does the user have local administration privileges on this host?
  • This is concluded by attempting to open the Service Control Manager (SCM) database with all privileges.

RPC Methods Used

MS-DSSP

• DsRolerGetPrimaryDomainInformation.

MS-SCMR

• ROpenSCManagerW.
• RCloseServiceHandle.