wmic – Penetration Test Resource Page

05 Jan

Windows Post-Exploitation Command List

Pentester
Cheat Sheet,Skills
Tags: arp -a, carrot.exe, nbtstat -a, netstat -bano, qprocess, sc qc, systeminfo, tasklist /svc, wmic
no comments

WindowsPost-Exploitation Original Link

Windows Privilege Escalation Methods for Pentesters

Imagine that you have gotten a low-priv Meterpreter session on a Windows machine. Probably you’ll run getsystem to escalate your privileges. But what if it fails? Don’t panic. There are still some techniques you can try. Unquoted Service Paths Basically, it is a vulnerability that occurs if a service executable path is not enclosed with quotation marks […]

Windows Privilege Escalation Fundamentals

Not many people talk about serious Windows privilege escalation which is a shame. I think the reasons for this are probably (1) during pentesting engagements a low-priv shell is often all the proof you need for the customer, (2) in staged environments you often pop the Administrator account, (3) meterpreter makes you lazy (getsystem = […]