怎样用WMI获取远程系统信息

1、1 / 60用 WM 猎取远程系统信息WMI（Win dows 治理规范：Win dows Ma nageme nt In strume ntati on ）是 Microsoft 基于 Web 的企业治理（WBEM 的实现，同时也是一种基于 标准的系统治理接口。WM 是一种轻松猎取系统信息的强大工具，而且不依靠 IPC$。我把 zzzevazzz 的 rs 系列的几个脚本用 C#写了一遍，能够查/杀 进程、列举系统信息、列举/停止/启动服务、注销用户登陆/重启目标/ 关机/断电、列举用户信息。WMI 的应用远不止这些，更多功能等你挖掘了。后附源代码（ps :代码结构专门差，将就着看吧）。另：

2、由因此用 C#写的，因此需要.NET Framework 的支持。编译好的可执行文件：ftp:1O.1.1.1i ncomi ngWMImwmi.exe.NET Framework 安装文件：ftp:i ncomi ngWMINET Framework v1.0.3705Setup.exe-cut here2 / 60using System;using System.Management;class MWmi/ 关心public static void usage()Console.WriteLine();Console.WriteLine(MWmi v0.1 , by my

3、ld);Console.WriteLine();Console.WriteLine(Usage: );Console.WriteLine( -pslist -List processes.);Console.WriteLine( -pskill -Kill process.);Console.WriteLine( -osinfo -Show SystemInfo.);3 / 60Console.WriteLine( -shut -Shutdowm system.);Console.WriteLine( -svclist -List service.);Console.WriteLine( -s

4、tartsvc -Start a service.);Console.WriteLine( -stopsvc -Stop a service.);Console.WriteLine( -userlist -Show all users.);Console.WriteLine();/ 应用程序的主入口点。public static void Main(string args)if ( args.Length 4 )4 / 60usage();Environment.Exit(0);if( args0 = -pslist)ConnectionOptions Conn = new Connectio

5、nOptions();Conn.Username =args2;if(args3=NULL)Conn.Password =;else Conn.Password =args3;ManagementScope ms = newManagementScope( +args1+rootcimv2, Conn );try5 / 60ms.Connect();ObjectQuery Query = new ObjectQuery(SELECTProcessId,Name,ExecutablePath FROM Win32_Process);ManagementObjectSearcher link =

6、newManagementObjectSearcher(ms,Query);ManagementObjectCollection Collection = link.Get();Console.WriteLine();Console.WriteLine(PID Name ExecutablePath);foreach (ManagementObject Process in Collection)Console.WriteLine( Convert.ToString(ProcessProcessId).PadRight(6)+Convert.ToString(ProcessName).PadR

7、ight(20 )+ProcessExecutablePath );Console.WriteLine();catch(Exception exObj)Console.WriteLine();Console.WriteLine(Failed! Error code:+exObj.Message);Console.WriteLine();/ END -pslistelse if( args0 = -pskill )6 / 607 / 60if ( args.Length != 5 )usage();Environment.Exit(0);tryConnectionOptions Conn = n

8、ew ConnectionOptions();Conn.Username =args2;if(args3=NULL)Conn.Password =;else Conn.Password =args3;/string ProName = args4;ManagementScope ms = new ManagementScope( +8 / 60args1 + rootcimv2, Conn);ms.Connect();ObjectQuery Query = new ObjectQuery(SELECT * FROMWin32_Process);ManagementObjectSearcher link = newManagementObjectSearcher(ms,Query);ManagementObjectCollection Collecti