✨
Tech Stuff
  • Welcome
  • Threat Hunting
    • Learning ETW
      • Logman
      • SilkETW
      • Apply ETW to Windows Event (1)
    • Learning win32evtlog in python
  • Attack Simulation
    • Atomic Red Team
  • Tools
    • Windows Events Providers Explorer
    • FRIDA for iOS app penetration testing
  • Windows Security
    • User Account Control (UAC)
      • UAC Bypass
  • Windows OS Penetration Testing
    • Metasploit
    • PowerShell
    • Bloodhound
  • Unorganized Python
  • Python - pexpect
  • Python - subprocess for Windows
  • Parsing evtx to json
  • Python - Pykd
  • Workflow
    • Kali Linux on Docker
Powered by GitBook
On this page
  • Start a Process
  • Modify Registry
  • Create registry keys and entries
  • Add a registry entry to
  • Delete subkeys from registry recursively

Was this helpful?

  1. Windows OS Penetration Testing

PowerShell

A collection of PowerShell commands/functions that helps your penetration testing

Start a Process

PS> Start-Process "C:\Windows\System32\fodhelper.exe" -WindowStyle Hidden

Modify Registry

Create registry keys and entries

PS> New-Item "HKCU:\Software\Classes\ms-settings\Shell\Open\command" -Force

Add a registry entry to

PS> New-ItemProperty -Path "HKCU:\Software\Classes\ms-settings\Shell\Open\command" -Name "DelegateExecute" -Value "" -Force

Delete subkeys from registry recursively 

PS> Remove-Item HKLM:\Software\example\ -Recurse
PreviousMetasploitNextBloodhound

Last updated 4 years ago

Was this helpful?