ch0ic3/h4cker
1
0
Fork 0
mirror of https://github.com/The-Art-of-Hacking/h4cker.git synced 2024-12-18 10:56:09 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Update powershell_commands.md

Browse Source
This commit is contained in:
Omar Santos 2019-12-26 21:14:03 -05:00 committed by GitHub
parent c9f6dd7554
commit 26d5cc2518
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 15 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
post_exploitation/powershell_commands.md
View File

@ -1,18 +1,17 @@
| PowerShell Command | Description | | PowerShell Command | Description |
|----------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------| |----------------------------------------------|------------------------------------|
| `Get-ChildItem` | Lists directories | | `Get-ChildItem` | Lists directories |
| `Copy-Item sourceFile.doc destinationFile.doc` | Copies a file (cp, copy, cpi) | | `Copy-Item sourceFile.doc destinationFile.doc` | Copies a file (cp, copy, cpi) |
| `Move-Item sourceFile.doc destinationFile.doc` | Moves a file (mv, move, mi) | | `Move-Item sourceFile.doc destinationFile.doc` | Moves a file (mv, move, mi) |
| `Select-String –path c:\users\*.txt –pattern password` | Finds text within a file | | `Select-String –path c:\users\*.txt –pattern password` | Finds text within a file |
| `Get-Content omar_s_passwords.txt` | Prints the contents of a file | | `Get-Content omar_s_passwords.txt` | Prints the contents of a file |
| `Get-Location` | Gets the present directory | | `Get-Location` | Gets the present directory |
| `Get-Process` | Gets a process listing | | `Get-Process` | Gets a process listing |
| `Get-Service` | Gets a service listing | | `Get-Service` | Gets a service listing |
| `Get-Process \| Export-Csvprocs.csv` | Exports output to a comma-separated values (CSV) file | | `Get-Process \| Export-Csvprocs.csv` | Exports output to a comma-separated values (CSV) file |
| `1..255 \| % {echo "10.1.2.$_"; ping -n 1 -w 100 10.1.2.$_ | SelectString ttl}` | Launches a ping sweep to the 10.1.2.0/24 network | | `1..255 \| % {echo "10.1.2.$_"; ping -n 1 -w 100 10.1.2.$_ \| SelectString ttl}` | Launches a ping sweep to the 10.1.2.0/24 network |
| `1..1024 \| % {echo ((new-object Net.Sockets.TcpClient).Connect("10.1.2.3",$_))"Port $_ is open!"} 2>$null` | Launches a port scan to the 10.1.2.3 host (scans for ports 1 through 1024) | | `1..1024 \| % {echo ((new-object Net.Sockets.TcpClient).Connect("10.1.2.3",$_))"Port $_ is open!"} 2>$null` | Launches a port scan to the 10.1.2.3 host (scans for ports 1 through 1024) |
| `Get-HotFix` | Obtains a list of all installed hotfixes | | `Get-HotFix` | Obtains a list of all installed hotfixes |
| ```cd HKLM: ls``` | Navigates the Windows registry | | `cd HKLM:` and then `ls` | Navigates the Windows registry |
| ```Get-NetFirewallRule –all | `Get-NetFirewallRule –all` or `New-NetFirewallRule -Action Allow -DisplayName LetMeIn-RemoteAddress 10.6.6.6` | Lists and modifies the Windows firewall rules |
New-NetFirewallRule -Action Allow -DisplayName LetMeIn-RemoteAddress 10.6.6.6 | Lists and modifies the Windows firewall rules``` | | `Get-Command` | Gets a list of all available commands |
| `Get-Command` | Gets a list of all available commands |