Navigation : Reconnaissance Enumeration Exploitation Post-Exploitation - Post-Exploitation Unix - Post-Exploitation Windows -- Lateral movements -- File transfer -- Privilege escalation --- Patches Detection --- Services and Processes --- Registry --- Schedules Tasks --- Startup Applications --- Password mining --- Change user / Impersonation --- Admin2System --- Exploits --- Privilege abuse -- Data Mining - Exfiltration -- Enable/Disable services - Pivoting / tunneling - Password cracking Web Wi-Fi Physical access Misc Forensic Admin2System Getsystem getsystem https://github.com/decoder-it/psgetsystem psgetsystem.ps1 <system_PID> <cmd.exe> Process injection post/windows/manage/priv_migrate Psexec psexec \\127.0.0.1 cmd.exe Change user / Impersonation Exploits