OS enumeration¶
Linux¶
- List all SUID files
find / -perm -4000 2>/dev/null- List allowed commands for sudo
sudo -l
Windows¶
net config Workstation systeminfo | findstr /B /C:”OS Name” /C:”OS Version” hostname net users ipconfig /all route print arp -A netstat -ano netsh firewall show state netsh firewall show config schtasks /query /fo LIST /v tasklist /SVC net start DRIVERQUERY reg query HKLMSOFTWAREPoliciesMicrosoftWindowsInstallerAlwaysInstallElevated reg query HKCUSOFTWAREPoliciesMicrosoftWindowsInstallerAlwaysInstallElevated dir /s pass == cred == vnc == .config findstr /si password *.xml *.ini *.txt reg query HKLM /f password /t REG_SZ /s reg query HKCU /f password /t REG_SZ /s