🏁Cheatsheet - Fast Commands

Invisible Shells

Herramienta
Para qué sirve
Ejemplos de comandos

Invisi-Shell

PowerShell stealth (AMSI + logging bypass)

C:\AD\Tools\InviShell\RunWithRegistryNonAdmin.bat

C:\AD\Tools\InviShell\RunWithPathAsAdmin.bat

PowerView

Enumeración ofensiva de Active Directory

. C:\AD\Tools\PowerView.ps1

powershell Get-DomainUser powershell Get-DomainGroup

powershell Find-InterestingDomainAcl

powershell Get-DomainObjectAcl -Identity administrador -ResolveGUIDs

ADModule

Módulo oficial de Microsoft para administrar AD

Import-Module C:\AD\Tools\ADModulemaster\Microsoft.ActiveDirectory.Management.dll

Import-Module C:\AD\Tools\ADModule-master\ActiveDirectory\ActiveDirectory.psd1

powershell Get-ADUser -Filter * powershell Get-ADGroup -Filter *

Using Invisi-Shell

• With admin privileges: RunWithPathAsAdmin.bat • With non-admin privileges: RunWithRegistryNonAdmin.bat • Type exit from the new PowerShell session to complete the clean-up.

cd \AD\Tools
C:\AD\Tools\InviShell\RunWithRegistryNonAdmin.bat
. C:\AD\Tools\PowerView.ps1

Last updated