Init commit
This commit is contained in:
commit
d5d16ce16b
1 file changed
+54
@@ -0,0 +1,54 @@
|
||||
# Speicherpfade für Chromium-basierte Browser (Edge/Chrome) und Firefox
|
||||
$ChromiumPaths = @(
|
||||
"AppData\Local\Google\Chrome\User Data\Default\Login Data",
|
||||
"AppData\Local\Microsoft\Edge\User Data\Default\Login Data"
|
||||
)
|
||||
$FirefoxPathPart = "AppData\Roaming\Mozilla\Firefox\Profiles"
|
||||
|
||||
$Report = @()
|
||||
|
||||
# Holt alle lokalen Benutzerprofile auf dem Rechner (außer Systemkonten)
|
||||
$UserProfiles = Get-CimInstance -ClassName Win32_UserProfile | Where-Object { $_.Special -eq $false -and $_.LocalPath -notlike "*\Windows*" }
|
||||
|
||||
foreach ($Profile in $UserProfiles) {
|
||||
$UserName = Split-Path $Profile.LocalPath -Leaf
|
||||
$Path = $Profile.LocalPath
|
||||
|
||||
$HasSavedPasswords = $false
|
||||
$DetectedBrowsers = @()
|
||||
|
||||
# 1. Prüfe Chrome & Edge (Suchen nach der Datei 'Login Data')
|
||||
foreach ($RelPath in $ChromiumPaths) {
|
||||
$FullCheckPath = Join-Path $Path $RelPath
|
||||
if (Test-Path $FullCheckPath) {
|
||||
# Da die Datei immer existiert, prüfen wir, ob sie größer als die Standard-Leergröße ist (meist > 24KB)
|
||||
if ((Get-Item $FullCheckPath).Length -gt 30000) {
|
||||
$HasSavedPasswords = $true
|
||||
$BrowserName = if ($RelPath -match "Chrome") { "Google Chrome" } else { "Microsoft Edge" }
|
||||
$DetectedBrowsers += $BrowserName
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# 2. Prüfe Firefox (Suchen nach 'logins.json')
|
||||
$FFProfilePath = Join-Path $Path $FirefoxPathPart
|
||||
if (Test-Path $FFProfilePath) {
|
||||
$LoginsFile = Get-ChildItem -Path $FFProfilePath -Filter "logins.json" -Recurse -ErrorAction SilentlyContinue
|
||||
if ($LoginsFile -and $LoginsFile.Length -gt 100) {
|
||||
$HasSavedPasswords = $true
|
||||
$DetectedBrowsers += "Mozilla Firefox"
|
||||
}
|
||||
}
|
||||
|
||||
# Ergebnis sammeln
|
||||
if ($HasSavedPasswords) {
|
||||
$Report += [PSCustomObject]@{
|
||||
"Benutzer" = $UserName
|
||||
"Speichert" = "Ja"
|
||||
"Browser" = ($DetectedBrowsers -join ", ")
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Ausgabe des Berichts
|
||||
$Report | Format-Table -AutoSize
|
||||
Reference in new issue
Block a user