post-access

you've gained access to a windows workstation computer on an unknown network. what do you do next?

Install GNU/Linux.

Wonder where it all went wrong with my life.

Scan the LAN.

install a monero miner

>>4359 Passively listen to traffic to see what other devices are communicating on the network.

Just wondering, since I haven't used windows for over 9 years. How does one actually "gain access" to a windows machine? For Linux there's ssh with bad passwords, for example. How would one communicate with a windows machine? The windows CLI is soykaf and I wouldn't consider it particularly useful for controlling a computer.

>>4370 PowerShell, it's as powerful as bash for controlling Windows systems.

>>4375 >powershell Interesting, looks like the aliases make it so that unix users can use it without much learning.

>>4376 IIRC the aliases only really work for simple commands with a switch or two, but for scripting you need to learn the actual thing. Neither is too powerful without scripting.

Try to orient yourself as to where you are in the network. Dump passwords, escalate priv, move to other machines using that information. Depends on what your goals are really.

>post pictures of spiderman >make it crescent fresh >make a digg account >make millhouse a meme >make dem whistles go woo God it feels like we've been travelling for eons, yet I could swear that Youtube isn't even 10 years old

>>4473 wew lad, those are some old memes. 2018 and Millhouse still isn't a meme see you guys on addictinggames.com

>>4360 Install GNU/Gentoo

>>4359 simple soykaf first >start with an ipconfig /all to learn about the network >what is the subnet? >check the hostname >look at the other usernames on the PC >do I have admin rights? >is there any AV tools on the machine i need to bypass? >grab SAM files and attempt to bruceforce with rainbow tables >install RAT (a callback number in case we get disconnected) >surf through various user directories and try to find valuable information. > set up a separate administrative account with no profile just in case. >wipe logs >wireshark/dumpcap >run network scans >anywhere else I can pivot to?