Ways to Execute Reverse Shells on Windows
Learn various techniques for obtaining reverse shells on Windows systems, from netcat to PowerShell scripts to fully interactive ConPtyShell.
Jan 24, 2022 Juan Antonio González Mena
Windows
23 articles
What is LocalAccountTokenFilterPolicy
Learn what LocalAccountTokenFilterPolicy is in Windows, how it affects remote command execution with local administrative accounts, and how to disable it for pentesting purposes.
Jan 21, 2022 Juan Antonio González Mena
How NTLM Authentication Works
Detailed explanation of how NTLM authentication works in Windows, including LM and NT hashes, the Net-NTLMv2 process, and techniques like Pass The Hash.
Jan 10, 2022 Juan Antonio González Mena
Privilege Escalation through Passwords in Windows
Techniques for escalating privileges in Windows through passwords stored in the registry, configuration files, saved credentials, and SAM hash extraction.
Jan 3, 2022 Juan Antonio González Mena
Windows Privilege Escalation Through Insecure GUI Applications
Learn to identify and exploit misconfigured graphical applications in Windows to escalate privileges using GUI exploitation techniques.
Dec 27, 2021 Juan Antonio González Mena
What is a Windows Service
Learn what Windows services are, how they work, the different types of privilege escalation related to services, and enumeration techniques with accesschk.exe.
Dec 22, 2021 Juan Antonio González Mena
Windows Privilege Escalation Through Unquoted Service Paths
Learn to identify and exploit Windows services with unquoted paths to escalate privileges using Unquoted Service Path techniques.
Dec 14, 2021 Juan Antonio González Mena
Windows Privilege Escalation with Kernel Exploits
Learn to escalate privileges on Windows through kernel exploits, vulnerability enumeration, and tools like WESNG and Watson.
Dec 2, 2021 Juan Antonio González Mena
How to Do Pivoting with Plink.exe
Learn how to use Plink.exe, the command-line version of PuTTY, to perform Remote Port Forwarding on older Windows systems without a built-in SSH client.
Nov 6, 2021 Juan Antonio González Mena