Overview
The EnvironmentVariables command enumerates all environment variables for the system and current user. Environment variables often contain sensitive information like paths, credentials, API keys, proxy settings, and application configurations.Syntax
Remote Execution
Output
Returns environment variables including:- Variable name
- Variable value
- Scope (System/User)
Use Cases
- Red Team
- Blue Team
- Discover credentials in environment variables
- Find API keys and tokens
- Identify proxy configurations
- Locate application paths
- Discover cloud credentials (AWS_ACCESS_KEY, etc.)
Example Output
Remote Execution
This command supports remote execution using the
-computername parameter.Detection Considerations
Low detection risk - queries environment variables via WMI.
Related Commands
- EnvironmentPath - PATH variable with permissions
- OSInfo - Operating system information
- LocalUsers - Local user accounts