Set-ItemProperty

Deshabilitar UAC desde PowerShell

Windows PowerShell aliases

 

Habilitar o deshabilitar un servidor proxy en Internet Explorer utilizando PowerShell

Habilitar

Deshabilitar

Windows Post Exploitation Cmdlets Execution (PowerShell)

Presence This section focuses on information gathering about the victim host and the network that it’s attached to. System

WMI

Networking

Users

Configs

Finding important files

Files to pull

Remote system access

Software

Auto­Start directories

Persistance This section focuses on gaining a foothold to re­gain, or re­obtain access to a system through means of authentication, backdoors, etc.. Download

Compress or expand ZIP archive

Reg command exit

Deleting logs

Uninstalling software “Antivirus”

Invasive or altering commands

Permitir conexiones remotas

Cambiar el fondo de escritorio

 

Windows PowerShell aliases

 

Registry Hack to set Internet Explorer Start Page

 

Turn on Remote Desktop (Terminal Server)