Posts

Showing posts from September, 2020

Bypass PowerShell Execution Policy to Pwn Windows

Image
PowerShell is an essential component of any Windows environment and can be a powerful tool in the hands of a hacker. During post-exploitation, PowerShell scripts can make privilege escalation and pivoting a breeze, but its execution policy can put a damper on even the best-laid plans. There are a variety of methods, however, that can be used to bypass PowerShell execution policy. PowerShell Execution Policy Overview The purpose of PowerShell's execution policy is to control how configuration files are loaded and how scripts are run. It's a safety feature that helps prevent malicious scripts from being executed. Policies can be set at the computer level, user level, and session level on Windows machines. It's important to note that the execution policy is not meant to be secure — it merely prevents users from unintentionally causing damage. As we'll soon find out, it can be bypassed in several ways. There are seven types of execution policies in PowerShell. ...

Top 10 Things to Do After Installing Kali Linux

Image
  K ali Linux , by default, probably doesn't have everything you need to get you through day-to-day penetration testing with ease. With a few tips, tricks, and applications, we can quickly get started using Kali like a professional white hat. Most Linux distributions are highly customizable. This makes personalizing your penetration testing distribution a bit daunting. With just a few commands, we can automate tasks, install our favorite software, create additional user accounts, properly configure anonymity software, and optimize our interactions with terminals. There are just a few things we can do to improve our interactions with the operating system. 1 Install Git Git is an open-source software version control application. It can be used for collaboratively sharing and editing code but is commonly referenced here on TryWix Studio as the primary tool for copying (or "cloning") code repositories found on GitHub. Git is a must have tool for penetration testers looking to...