bof_sar
Gain remote situational awareness by scanning ports, collecting scheduled tasks, querying user sessions, and scanning NetBIOS names.
Instructions
SAR-BOF: Situational Awareness Remote — Network discovery and enumeration.
smartscan [-p ports] Smart TCP port scan. Target can be IP, range, CIDR, or comma-separated. Port presets: fast, standart, full, or custom (e.g. 80,443,22-25,3389). Example: smartscan 192.168.1.0/24 -p standart
taskhound [-u username] [-p password] [-save dir] [-unsaved-creds] [-grab-blobs] Collect scheduled tasks from a remote system. Example: taskhound 192.168.1.100 -u domain\admin -p password
quser [host] Query user sessions on a remote machine. Example: quser MainDC
nbtscan [-v] [-q] [-e] [-l] [-s separator] [-t timeout_ms] [-no-targets] NetBIOS name scanner. Auto-populates Targets tab. Example: nbtscan 192.168.1.0/24 -v
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | Yes | ||
| command | Yes | ||
| args | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |