Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/the-useless-one/pywerview/llms.txt

Use this file to discover all available pages before exploring further.

get-localdisks connects to a target Windows machine and enumerates its locally attached disk drives using WMI. The results include each disk’s device identifier, drive type classification (e.g. local disk, CD-ROM, network drive), and description string. This is useful during post-exploitation to understand a target host’s storage layout — identifying additional data volumes, removable media, or unexpected mapped drives that may indicate shared storage or sensitive data locations. Like all target-parser commands, it connects directly to the specified host rather than through a domain controller, so local credentials are a valid alternative to domain credentials.

Flags

--computername
string
required
IP address or hostname of the target Windows host to query for local disks.
-w, --workgroup
string
Name of the domain to authenticate with. Can be omitted when using local credentials.
-u, --user
string
Username for authentication. Accepts both domain accounts (DOMAIN\user) and local accounts.
-p, --password
string
Password associated with the specified username.
--hashes
string
NTLM hashes for pass-the-hash authentication. Format: [LMHASH:]NTHASH. The LM portion can be omitted or replaced with the empty LM hash.
-k
boolean
Use Kerberos authentication. Reads credentials from the ccache file pointed to by KRB5CCNAME. Falls back to the provided username and password if no valid ticket is found.
-l, --logging-level
string
Logging verbosity sent to stderr. Choices: CRITICAL (default), WARNING, DEBUG, ULTRA.
--json
boolean
Print results as JSON instead of the default human-readable format.

Examples

# List local disks on a host using domain credentials
pywerview get-localdisks --computername 192.168.1.10 -u alice -p 'P@ssw0rd' -w contoso.com

# Using local Administrator credentials
pywerview get-localdisks --computername 192.168.1.10 -u Administrator -p 'LocalP@ss'

# Pass-the-hash authentication
pywerview get-localdisks --computername 192.168.1.10 -u alice --hashes :a87f3a337d73085c45f9416be5787d86 -w contoso.com

# JSON output
pywerview get-localdisks --computername 192.168.1.10 -u alice -p 'P@ssw0rd' -w contoso.com --json
WMI access requires the authenticating user to have remote WMI permissions on the target host, typically local administrator rights. Standard domain users will receive an access denied error.

Build docs developers (and LLMs) love