novaden

windows

13 items

Everything tagged "windows".

evil-winrm notes 1 min 13 Sept 2026 Interactive PowerShell over WinRM, run from Kali. Mimikatz notes 3 min 01 Aug 2026 Mimikatz extracts secrets from a live Windows host: plaintext passwords, NT hashes, and Kerberos tickets held in memory by LSASS, plus the local SAM and LSA secrets. PrivescCheck PowerUp SharpUp notes 2 min 29 Aug 2026 Three Windows privilege escalation enumerators that sit between [winPEAS](/collections/oscp/winpeas) and manual triage. Windows Token Privileges notes 11 min 22 Jul 2026 Windows assigns privileges to users and groups. winPEAS notes 1 min 22 Jul 2026 winPEAS enumerates a Windows host for privilege escalation vectors and highlights the most promising findings. Windows Service Exploits notes 5 min 22 Jul 2026 Windows services run in the background, often as SYSTEM. accesschk notes 1 min 22 Jul 2026 accesschk (Sysinternals) reports the effective access a user or group has to services, files, directories, and registry keys. Windows Remote Access notes 3 min 24 Jul 2026 RDP and WinRM usually become useful after credentials surface. Privilege Escalation (Windows) notes 4 min 22 Jul 2026 Goal: turn a low-privilege shell into one running as Administrator or SYSTEM. icacls notes 2 min 25 Aug 2026 Built-in Windows tool that prints and changes NTFS permissions on files and folders. LAPS notes 2 min 03 Aug 2026 LAPS (Local Administrator Password Solution) exists because every machine deployed from one image shares one local Administrator password, so a single dumped hash pass-the-hashes across the whole estate. Windows Autoruns and Scheduled Tasks notes 2 min 22 Jul 2026 A group of misconfigurations that all end the same way: place or modify something a privileged trigger later executes. Windows Credential Hunting notes 5 min 22 Jul 2026 Windows stores passwords in several places, some of them insecurely, and admins reuse them.