ShellSpells
  • 🧙‍♂️Welcome!
    • ShellSpells
    • FAQs
    • License & Disclaimer
  • 🐧Linux
    • System Ops
      • Transcripts
      • Help
      • System Info
        • Date/Time
        • System Details
        • Patches & Updates
        • Init System Identification
        • Hostname / Host ID
        • Variables
        • Hardware & Resources
      • Filesystem
        • Traverse & Enumerate
        • Drives & Partitions
        • Shares
        • Packages
        • Connected Devices
        • Kernel Modules (Drivers)
      • Users & Groups
        • Enumerate
        • Modify
      • Network
        • Enumerate
        • Modify
      • Scheduled Jobs
        • Enumerate
        • Modify
      • Processes
        • Enumerate
        • Modify
        • Custom Script and Shared Object
        • Process I/O Redirection
      • Services
        • Enumerate
        • Modify
        • Create a Service
      • Startup/Boot Scripts
        • Enumerate
        • Modify
      • Security
        • Antivirus
        • Firewall
        • SSH Keys
      • History & Logs
        • History
        • Logs
    • File Ops
      • Search
        • Filename
        • Content
        • Users (Owners)
        • Time
        • Size
        • Permission
        • Hidden Files
        • Inode
        • Find + Exec
        • Notes
      • Enumerate Metadata
      • Modify Metadata
      • Read Content
      • Modify Content
      • Extract Content
      • Sort / Compare / Count
      • Move
      • Copy
      • Execute
      • Hash
      • Encode/Decode
      • Compress/Decompress
      • Working With Weird Filenames
    • Terminal Ops
      • Keyboard Shortcuts
      • Tmux Shortcuts
  • 🪟Windows
    • System Ops
      • Transcripts
      • Help
      • System Info
        • One-liners
        • Date/Time
        • System Details
        • Hotfixes
        • Domain or Workgroup
        • Data Execution Prevention
        • Variables
        • Hardware & Resources
      • Filesystem
        • Traverse & Enumerate
        • Drives & Partitions
        • Installed Software
        • Drivers
        • Shares
      • Registry
        • Enumerate
        • Modify
        • Forensically Relevant Keys
      • Users & Groups
        • Enumerate
        • Modify
      • Network
        • Enumerate
        • Modify
      • Scheduled Tasks
      • Processes
        • Enumerate
        • Modify
      • Services
        • Enumerate
        • Modify
      • Autorun / Startup
        • Enumerate
        • Modify
      • Security
        • Permissions
          • Enumerate
          • Page
        • Antivirus
        • Firewall
          • Enumerate
          • Modify
        • Audit Policies
        • Remoting
          • Enumerate
          • Modify
          • Registry Locations
        • Stored Credentials
      • Remote Command Execution
      • Active Directory
        • Enumerate
        • Modify
      • History & Logs
        • History
        • Logs
      • PowerShell Config
      • Scripting
      • WMIC Notes
    • File Ops
      • Search
        • Filename
        • Time
        • Size
        • Permissions
        • Attributes
        • Wildcarding
      • Enumerate Metadata
        • One Liners
        • Users (Owners)
        • Timestamps
        • Size
        • Permissions
        • Attributes
      • Modify Metadata
        • Change Owner
        • Timestamps
        • Size
        • Attributes
      • Read Content
      • Modify Content
        • Overwrite
        • Insert
        • Append
        • Replace / Remove
        • Convert Case
        • Alternate Data Streams
      • Extract Content
      • Sort / Compare / Count
        • Sort
        • Count
        • Compare
      • Move
      • Copy
      • Execute
      • Hash
      • Encode/Decode
      • Compress/Decompress
      • Working With Weird Filenames
      • Output Formatting / Filtering
      • File Formatting
      • Operators
  • ⛓️Network
    • Traffic Manipulation
      • iptables
        • Option List
        • General Commands
        • Filter Tables
        • NAT
        • Mangle
        • Filter for SSH Traffic (Example)
      • nftables
    • Packet Capture
      • Syntax
      • TCPDump Examples
    • Packet Analysis
      • Wireshark
  • 🚗Maneuver
    • SSH
    • Control Sockets
    • RDP
    • Windows Port Proxy
  • 🛩️Data Transfer
    • SCP
    • FTP
    • Netcat
      • Netcat Relays
    • Server Interactions
    • Alternate Methods
  • 🪄REGEX
    • Examples
Powered by GitBook
On this page
  • Enumerate
  • Install / Uninstall
  • Executable (.exe) Installers
  • Windows Installer (.msi) Packages
  • PowerShell
  • Windows Package Manager (winget)
  • Uninstall applications that begin with Google

Was this helpful?

  1. Windows
  2. System Ops
  3. Filesystem

Installed Software

Enumerate

Simple Listing:

Get-CimInstance -ClassName Win32_Product
Get-WmiObject -Class Win32_Product | Select-Object Name, Version
Get-ItemProperty HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall* | Select-Object DisplayName, DisplayVersion, Publisher | Format-Table –AutoSize

More Details:

Get-WmiObject -Class Win32_Product | Select-Object Name, Version, InstallDate, Vendor
wmic /output:C:\InstalledSoftware.txt product get name, version, description, installdate, vendor

Export to File:

Get-WmiObject -Class Win32_Product | Select-Object Name, Version, InstallDate, Vendor | Export-Csv -Path "C:\InstalledSoftware.csv" -NoTypeInformation

Install / Uninstall

Executable (.exe) Installers

<InstallerName>.exe

Runs an executable installer with its default configuration.

<InstallerName>.exe /?

Displays available command-line options for the executable installer.

<InstallerName>.exe /silent

Installs the software silently without user interaction (specific options vary by installer).

<UninstallerName>.exe

Runs an executable uninstaller with its default configuration.

<UninstallerName>.exe /?

Displays available command-line options for the executable uninstaller.

<UninstallerName>.exe /silent

Uninstalls the software silently without user interaction (specific options vary by uninstaller).

Windows Installer (.msi) Packages

msiexec /i <PackageName>.msi

Installs an MSI package.

msiexec /i <PackageName>.msi /qn

Installs an MSI package quietly without user interface.

msiexec /x <PackageName>.msi

Uninstalls an MSI package.

msiexec /x <PackageName>.msi /qn

Uninstalls an MSI package quietly without user interface.

msiexec /x {<ProductCode>}

Uninstalls an MSI package using its product code.

Installs an MSI package with a transform file to customize the installation.

msiexec /i <PackageName>.msi TRANSFORMS=<TransformFile>.mst

PowerShell

Install-Package -Name <PackageName>

Installs a package from a package provider

Start-Process -FilePath <InstallerName>.exe -ArgumentList '/silent'

Runs an executable installer quietly.

Start-Process -FilePath msiexec -ArgumentList '/i <PackageName>.msi /qn'

Installs an MSI package quietly.

Uninstall-Package -Name <PackageName>

Uninstalls a package from a package

Start-Process -FilePath <UninstallerName>.exe -ArgumentList '/silent'

Runs an executable uninstaller quietly.

Start-Process -FilePath msiexec -ArgumentList '/x <PackageName>.msi /qn'

Uninstalls an MSI package quietly.

Windows Package Manager (winget)

winget install <PackageName>

Installs package

winget uninstall <PackageName>

Uninstalls package

Uninstall applications that begin with Google

(Get-WmiObject Win32_Product -computername win7 -credential fred -filter "Name like '%Google%'").Uninstall()
PreviousDrives & PartitionsNextDrivers

Last updated 1 year ago

Was this helpful?

🪟