Solve reverse shell garbled
chcp 65001 #fix garbled
File fusion
copy Trace.exe/b +beacon.exe/a 2.exe #Integrate Trace and beacon into 2.exe, which cannot be executed because it destroys the pe structure.
Daily operation and maintenance
Task managertaskmgr
Desktop process explorer
Group policy settings:gpedit.msc
appwiz.cpl
Add and delete
sysdm.cpl
Environment variables can be configured on the system property page
tasklist /svc
#View the current task list
taskkill /f /pid 123
#Forcibly terminate the task with pid 123
gpedit.msc
#Open local group policy management
eventvwr
#Open log page
services.msc
#Open the service page
gpupdate /force
Force Synchronization of Group Policy
runas /user:administrator(用户名) cmd.exe(应用程序的名字)
#cmdSwitching users
systeminfo | find /i "kB"
#View system patches
REG query HKLM\SYSTEM\CurrentControlSet\Control\Terminal" "Server\WinStations\RDP-Tcp /v PortNumber
#View rdp port
klist
#Verify cache ticket
klist purge
#Delete all notes