Info

Run Shortcuts

Powershell

Processes

Buffer Overflow

Kerberos

Architecture

0_I-5KzneqUHfF7bHR[1].png

Enumeration

Commands

Command Description
whoami /priv Current user’s privileges
net users List Users
net user <USERNAME> Current user’s privileges
qwinsta Other users logged in simultaneously
net localgroup User groups defined on the system
net localgroup <GROUP> List members of a specific group
systeminfo overview of the target system
findstr searching
wmic qfe get Caption,Description,HotFixID,InstalledOn list updates installed on the target system
schtasks query scheduled tasks
wmic product get name,version,vendor dump information it can gather on installed software
wmic service list brief checking running services

Locations

Location Description
C:\\boot.ini contains the boot options for computers with BIOS firmware

Privilege Escalation

https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology and Resources/Windows - Privilege Escalation.md