Documentation Index
Fetch the complete documentation index at: https://mintlify.com/the-useless-one/pywerview/llms.txt
Use this file to discover all available pages before exploring further.
get-localdisks connects to a target Windows machine and enumerates its locally attached disk drives using WMI. The results include each disk’s device identifier, drive type classification (e.g. local disk, CD-ROM, network drive), and description string. This is useful during post-exploitation to understand a target host’s storage layout — identifying additional data volumes, removable media, or unexpected mapped drives that may indicate shared storage or sensitive data locations. Like all target-parser commands, it connects directly to the specified host rather than through a domain controller, so local credentials are a valid alternative to domain credentials.
Flags
IP address or hostname of the target Windows host to query for local disks.
Name of the domain to authenticate with. Can be omitted when using local credentials.
Username for authentication. Accepts both domain accounts (
DOMAIN\user) and local accounts.Password associated with the specified username.
NTLM hashes for pass-the-hash authentication. Format:
[LMHASH:]NTHASH. The LM portion can be omitted or replaced with the empty LM hash.Use Kerberos authentication. Reads credentials from the ccache file pointed to by
KRB5CCNAME. Falls back to the provided username and password if no valid ticket is found.Logging verbosity sent to stderr. Choices:
CRITICAL (default), WARNING, DEBUG, ULTRA.Print results as JSON instead of the default human-readable format.