local classes

Overview

Get a list of local WMI classes in a specified namespace. This command is useful for WMI reconnaissance and understanding what classes are available for querying on the local SCCM client.

Syntax

SharpSCCM local classes [options]

Parameters

wmi-namespace

string

The WMI namespace to query (default: “root\CCM”)

Examples

# Query the local WMI repository for classes in the default root\CCM namespace
SharpSCCM local classes

# Query a different WMI namespace
SharpSCCM local classes -n "root\cimv2"

Output Format

The command outputs a list of available WMI classes:

[+] Connecting to \\127.0.0.1\root\CCM
[+] Executing WQL query: SELECT * FROM meta_class
__AbsoluteTimerInstruction
__ACE
__AggregateEvent
CCM_Authority
CCM_Client
CCM_ClientIdentificationInformation
SMS_Authority
SMS_Client
SMS_LocalMP
[+] Completed execution in 00:00:00.3168148

Common Use Cases

WMI Reconnaissance

Use this command to discover available WMI classes before performing more specific queries with other local commands.

Namespace Exploration

Explore different WMI namespaces to understand the full scope of available data on the SCCM client.

local class-instances - Get instances of a specific WMI class
local class-properties - Get properties of a WMI class
local query - Execute custom WQL queries

Local Commands class-instances

⌘I

Getting Started

Information Gathering

Credential Extraction

Lateral Movement

Local Operations

Infrastructure Management

Advanced Operations

Overview

Syntax

Parameters

Examples

Output Format

Common Use Cases

​Overview

​Syntax

​Parameters

​Examples

​Output Format

​Common Use Cases

​Related Commands

Overview

Syntax

Parameters

Examples

Output Format

Common Use Cases

Related Commands