cyber-security-resources/post_exploitation/powershell_commands.md

PowerShell Command	Description
Get-ChildItem	Lists directories
Copy-Item sourceFile.doc destinationFile.doc	Copies a file (cp, copy, cpi)
Move-Item sourceFile.doc destinationFile.doc	Moves a file (mv, move, mi)
Select-String –path c:\users\*.txt –pattern password	Finds text within a file
Get-Content omar_s_passwords.txt	Prints the contents of a file
Get-Location	Gets the present directory
Get-Process	Gets a process listing
Get-Service	Gets a service listing
`Get-Process	Export-Csvprocs.csv`
`1..255	% {echo "10.1.2.$"; ping -n 1 -w 100 10.1.2.$
`1..1024	% {echo ((new-object Net.Sockets.TcpClient).Connect("10.1.2.3",$))"Port $ is open!"} 2>$null`
Get-HotFix	Obtains a list of all installed hotfixes
```cd HKLM:
\ls```	Navigates the Windows registry
Get-NetFirewallRule –all ```New-NetFirewallRule -Action Allow -DisplayName LetMeIn-RemoteAddress 10.6.6.6	Lists and modifies the Windows firewall rules```
Get-Command	Gets a list of all available commands