post-access lainchan / sec ---------------------------------------------------------------------- Sipho Nkosi · 2018-04-05 02:13 you've gained access to a windows workstation computer on an unknown network. what do you do next? ---------------------------------------------------------------------- Arisu Mizuki · 2018-04-05 02:46 Install GNU/Linux. ---------------------------------------------------------------------- Jane Doe · 2018-04-05 03:42 Wonder where it all went wrong with my life. ---------------------------------------------------------------------- XERXES · 2018-04-05 04:00 Scan the LAN. ---------------------------------------------------------------------- Mentat · 2018-04-05 04:56 install a monero miner ---------------------------------------------------------------------- Armitage · 2018-04-05 07:44 >>4359 Passively listen to traffic to see what other devices are communicating on the network. ---------------------------------------------------------------------- Switch · 2018-04-05 09:57 Just wondering, since I haven't used windows for over 9 years. How does one actually "gain access" to a windows machine? For Linux there's ssh with bad passwords, for example. How would one communicate with a windows machine? The windows CLI is soykaf and I wouldn't consider it particularly useful for controlling a computer. ---------------------------------------------------------------------- Debbie Charteris · 2018-04-05 15:58 >>4370 PowerShell, it's as powerful as bash for controlling Windows systems. ---------------------------------------------------------------------- Tyrell Wellick · 2018-04-05 16:24 >>4375 >powershell Interesting, looks like the aliases make it so that unix users can use it without much learning. ---------------------------------------------------------------------- HELIOS · 2018-04-05 17:08 >>4376 IIRC the aliases only really work for simple commands with a switch or two, but for scripting you need to learn the actual thing. Neither is too powerful without scripting. ---------------------------------------------------------------------- Guthrie · 2018-04-19 19:02 Try to orient yourself as to where you are in the network. Dump passwords, escalate priv, move to other machines using that information. Depends on what your goals are really. ---------------------------------------------------------------------- Yet Another Lainon · 2018-04-19 21:47 >post pictures of spiderman >make it crescent fresh >make a digg account >make millhouse a meme >make dem whistles go woo God it feels like we've been travelling for eons, yet I could swear that Youtube isn't even 10 years old ---------------------------------------------------------------------- Nguoi La · 2018-04-19 21:52 >>4473 wew lad, those are some old memes. 2018 and Millhouse still isn't a meme see you guys on addictinggames.com ---------------------------------------------------------------------- Nameless · 2018-04-20 08:34 >>4360 Install GNU/Gentoo ---------------------------------------------------------------------- John Doe · 2018-04-29 02:24 >>4359 simple soykaf first >start with an ipconfig /all to learn about the network >what is the subnet? >check the hostname >look at the other usernames on the PC >do I have admin rights? >is there any AV tools on the machine i need to bypass? >grab SAM files and attempt to bruceforce with rainbow tables >install RAT (a callback number in case we get disconnected) >surf through various user directories and try to find valuable information. > set up a separate administrative account with no profile just in case. >wipe logs >wireshark/dumpcap >run network scans >anywhere else I can pivot to?