Tag powershell" itemprop="headline" >Tag powershell

Security

Use Pass-the-Hash to exfil ntds.dit

If you have a hash for either a domain admin or a local admin on a domain controller, you can use mimikatz to exfil the entire Active Directory database. From mimikatz, run the following command to spawn a shell as…

malwrforensics
August 18, 2018

Security

Use PowerShell’s PSSession to run remote commands with given credentials

If you’re doing a penetration test and you’ve got credentials for an account on a remote machine, you can try to run remote commands by taking advantage of the PowerShell remoting feature. First make sure that the TCP ports 5985/5986…

malwrforensics
August 10, 2018