Post

Windows Privilege Escalation

Windows Privilege Escalation cheatsheet

Windows Privilege Escalation
  • winPEAS
  • connect to the target
    1
    2
    
    evil-winrm -i <rhost> -u <user> -p <password>
    evil-winrm -i <rhost> -u <user> -H <hash-pass> 
    

System Enumeration

1
2
3
4
net users
net users <username>
whoami /priv
net localgroup

Find all important files:

1
2
cd C:\Users
tree /F

Network

  • ipconfig
  • netstat -ab
This post is licensed under CC BY 4.0 by the author.