{"id":275423,"date":"2016-03-03T15:26:02","date_gmt":"2016-03-03T12:26:02","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=275423"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=275423","title":{"rendered":"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438. \u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u0441 Richard Siddaway&#8217;s Blog"},"content":{"rendered":"<p>       \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0441\u043f\u0440\u0430\u0432\u043e\u0447\u043d\u0438\u043a \u043a\u043e\u043d\u0441\u0442\u0430\u043d\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u043f\u043e\u043a windows. must have \u043f\u043e\u0432\u0435\u0440\u0448\u0435\u043b\u044c\u0449\u0438\u043a\u0430.<\/p>\n<p>  <b>\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438<\/b><\/p>\n<p>  \u041a\u043e\u0433\u0434\u0430 \u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0430 <i>VBScript<\/i> \u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u00ab\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438\u00bb, \u044d\u0442\u043e \u043f\u0430\u043f\u043a\u0438 \u0442\u0438\u043f\u0430 \u00ab\u043c\u043e\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b\u00bb \u0438 \u0442\u043e\u043c\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435, \u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u044a\u0435\u043a\u0442 <i>Shell.Application<\/i> \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0432 \u043d\u0435\u0433\u043e \u043a\u043e\u043d\u0441\u0442\u0430\u043d\u0442\u0443 \u043d\u0443\u0436\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438.<\/p>\n<p>  \u0442\u043e\u0442 \u0436\u0435 \u0441\u0430\u043c\u044b\u0439 \u043f\u0443\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 PowerShell  <\/p>\n<pre><code class=\"cs\">$a = New-Object -ComObject Shell.Application Get-ChildItem $a.NameSpace(0x21).Self.Path <\/code><\/pre>\n<p>  \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0435\u0441\u043b\u0438 \u0432\u0430\u043c \u0442\u0430\u043a \u043d\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u044c\u0448\u0435:  <\/p>\n<pre><code class=\"cs\">Get-ChildItem ( (New-Object -ComObject Shell.Application).Namespace(0x21).Self.Path) <\/code><\/pre>\n<p>  <a name=\"habracut\"><\/a><br \/>  \u0418 \u0435\u0441\u043b\u0438 \u0432\u0430\u043c \u0445\u043e\u0447\u0435\u0442\u0441\u044f \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e\u0441\u0442\u0438 \u0442\u043e:  <\/p>\n<pre><code class=\"cs\">$cookies = 0x21 Get-ChildItem ( (New-Object -ComObject Shell.Application).Namespace($cookies).Self.Path) <\/code><\/pre>\n<p>  \u042d\u0442\u043e \u0441\u043f\u0438\u0441\u043e\u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u043f\u043e\u043a \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f \u0441\u0434\u0435\u043b\u0430\u043b \u043a\u043e\u0433\u0434\u0430\u0442\u043e \u0434\u043b\u044f \u0441\u0435\u0431\u044f.  <\/p>\n<pre><code class=\"cs\">$ie = 0x1            # Internet Explorer $progs = 0x2         # Programs $cp = 0x3            # Control Panel $printers = 0x4      # Printers and Faxes $mydocs = 0x5        # My Documents $favs = 0x6          # Favorites $startup = 0x7       # Startup $myrecdocs = 0x8     # My Recent Documents $sendto = 0x9        # SendTo $recycle = 0xa       # Recycle Bin $start = 0xb         # Start Menu $music = 0xd         # My Music $videos = 0xe        # My Videos $desktop = 0x10      # Desktop $mycomp = 0x11       # My Computer $mynet = 0x12        # My Network Places $nethood = 0x13      # NetHood $fonts = 0x14        # Fonts $templates = 0x15    # Templates $allsm = 0x16        # All Users Start Menu $allprogs = 0x17     # All Users Programs $allstart = 0x18     # All Users Startup $alldesk = 0x19      # All Users Desktop $appdata = 0x1a      # Application Data $printhood = 0x1b    # PrintHood $lsapps = 0x1c       # Local SettingsApplication Data $lstempie = 0x20     # Local Settings Temporary Internet Files $cookies = 0x21      # Cookies $lshist = 0x22       # Local SettingsHistory $allappdata = 0x23   # All Users Application Data $windows = 0x24      # Windows $system32 = 0x25     # System32 $progfiles = 0x26    # Program Files $mypics = 0x27       # My Pictures $profile = 0x28      # User Profile $common = 0x2b       # Common Files $alltemplates = 0x2e # All Users Templates $admintools = 0x2f   # Administrative Tools $netconn = 0x31      # Network Connections <\/code><\/pre>\n<p>  \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 \u0437\u0434\u0435\u0441\u044c:<br \/>  <a href=\"https:\/\/richardspowershellblog.wordpress.com\/2008\/03\/20\/special-folders\/\">richardspowershellblog.wordpress.com\/2008\/03\/20\/special-folders<\/a>               <\/p>\n<div class=\"clear\"><\/div>\n<p> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"https:\/\/habrahabr.ru\/post\/278483\/\"> https:\/\/habrahabr.ru\/post\/278483\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>       \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u0441\u043f\u0440\u0430\u0432\u043e\u0447\u043d\u0438\u043a \u043a\u043e\u043d\u0441\u0442\u0430\u043d\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u043f\u043e\u043a windows. must have \u043f\u043e\u0432\u0435\u0440\u0448\u0435\u043b\u044c\u0449\u0438\u043a\u0430.<\/p>\n<p>  <b>\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438<\/b><\/p>\n<p>  \u041a\u043e\u0433\u0434\u0430 \u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0430 <i>VBScript<\/i> \u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u00ab\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438\u00bb, \u044d\u0442\u043e \u043f\u0430\u043f\u043a\u0438 \u0442\u0438\u043f\u0430 \u00ab\u043c\u043e\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b\u00bb \u0438 \u0442\u043e\u043c\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435, \u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u044a\u0435\u043a\u0442 <i>Shell.Application<\/i> \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0432 \u043d\u0435\u0433\u043e \u043a\u043e\u043d\u0441\u0442\u0430\u043d\u0442\u0443 \u043d\u0443\u0436\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438.<\/p>\n<p>  \u0442\u043e\u0442 \u0436\u0435 \u0441\u0430\u043c\u044b\u0439 \u043f\u0443\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 PowerShell  <\/p>\n<pre><code class=\"cs\">$a = New-Object -ComObject Shell.Application Get-ChildItem $a.NameSpace(0x21).Self.Path <\/code><\/pre>\n<p>  \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0435\u0441\u043b\u0438 \u0432\u0430\u043c \u0442\u0430\u043a \u043d\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u044c\u0448\u0435:  <\/p>\n<pre><code class=\"cs\">Get-ChildItem ( (New-Object -ComObject Shell.Application).Namespace(0x21).Self.Path) <\/code><\/pre>\n<p>  <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-275423","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/275423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=275423"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/275423\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=275423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=275423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=275423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}