Hacktricks Offline < 2K >
winexe -U 'user%pass' //target "cmd.exe"</code></pre>
<h3>WMI</h3>
<pre><code>wmic /node:"target" /user:"user" /password:"pass" process call create "cmd.exe /c command"</code></pre>
</section>
<!-- Forensics -->
<section id="forensics">
<h2>💾 Basic Forensics Commands</h2>
<h3>Linux Live Response</h3>
<pre><code># Collecting evidence
ps auxfwww > ps.txt netstat -anp > netstat.txt lsof > lsof.txt last > last.txt history > history.txt crontab -l > crontab.txt hacktricks offline
Add an alias to your .bashrc or .zshrc:
alias hack-offline="cd ~/Documents/hacktricks/site && python3 -m http.server 1337 && open http://localhost:1337"
medusa -h target -u admin -P rockyou.txt -M ssh winexe -U 'user%pass' //target "cmd
/usr/bin/python3 = cap_setuid+ep
cd hacktricks && git pull
Set a cron job if you want it fully automatic. ps auxfwww > ps