Privesc Windows

Service Abuse

Copy command

nxc smb $TARGET -u $USER -p $PASS -x 'sc query state= all'

Description: Lister services et état pour triage.

Copy command

nxc smb $TARGET -u $USER -p $PASS -x 'sc qc <service>'

Description: Inspecter binPath/start type d'un service cible.

Copy command

nxc smb $TARGET -u $USER -p $PASS -x 'schtasks /query /fo LIST /v'

Description: Cartographier tâches planifiées abusables.

Copy command

nxc winrm $TARGET -u $USER -p $PASS -X 'Get-Service | ? {$_.StartType -ne "Disabled"}'

Description: Vérification PowerShell des services actifs.