ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-23 04:46:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

AppLocker rules

Browse Source
This commit is contained in:
Swissky 2020-01-06 23:03:54 +01:00
parent 71171fa78b
commit 742c7ee3c2
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Methodology and Resources/Windows - Privilege Escalation.md
View File

@ -6,6 +6,7 @@
* [Windows Version and Configuration](#windows-version-and-configuration) * [Windows Version and Configuration](#windows-version-and-configuration)
* [User Enumeration](#user-enumeration) * [User Enumeration](#user-enumeration)
* [Network Enumeration](#network-enumeration) * [Network Enumeration](#network-enumeration)
* [AppLocker Enumeration](#applocker-enumeration)
* [EoP - Looting for passwords](#eop---looting-for-passwords) * [EoP - Looting for passwords](#eop---looting-for-passwords)
* [SAM and SYSTEM files](#sam-and-system-files) * [SAM and SYSTEM files](#sam-and-system-files)
* [Search for file contents](#search-for-file-contents) * [Search for file contents](#search-for-file-contents)
@ -218,6 +219,11 @@ reg query HKLM\SYSTEM\CurrentControlSet\Services\SNMP /s
Get-ChildItem -path HKLM:\SYSTEM\CurrentControlSet\Services\SNMP -Recurse Get-ChildItem -path HKLM:\SYSTEM\CurrentControlSet\Services\SNMP -Recurse
``` ```
## AppLocker Enumeration
- With the GPO
- HKLM\SOFTWARE\Policies\Microsoft\Windows\SrpV2 (Keys: Appx, Dll, Exe, Msi and Script).
## EoP - Looting for passwords ## EoP - Looting for passwords
### SAM and SYSTEM files ### SAM and SYSTEM files