Post-Exploitation
Enumerate RDP Users Group
Get-NetLocalGroupMember -ComputerName ACADEMY-EA-MS01 -GroupName "Remote Desktop Users"Enumerate WinRM Group
Get-NetLocalGroupMember -ComputerName ACADEMY-EA-MS01 -GroupName "Remote Management Users"SQL Server
# Import Module
Import-Module .\PowerUpSQL.ps1
# Enumerate SQL Instance
Get-SQLInstanceDomain
# mssqlcient
mssqlclient.py INLANEFREIGHT/[email protected] -windows-authLast updated