16 Win priv. esc. Hidden In plain view

Question 1

How use PS to find .txt, .ini file in a specific folder (such web server) (C:\xampp)

Answer 1

Get-ChildItem -Path C:\xampp -Include .txt,.ini -File -Recurse -ErrorAction SilentlyContinue

Question 2

How use PS to find keepass file ?

Answer 2

Get-ChildItem -Path C:\ -Include *.kdbx -File -Recurse -ErrorAction SilentlyContinue

Question 3

How use PS to search for all interesting none ciphered file ? (List common ext (6))

Answer 3

Get-ChildItem -Path C:\Users\dave\ -Include .txt,.pdf,.xls,.xlsx,.doc,.docx -File -Recurse -ErrorAction SilentlyContinue

Question 4

How get Local groups of the current users is member of ?

Answer 4

whoami

net user <user></user>

Question 5

From information retrievied via membership of local group, how run a command as other user ?

Answer 5

runas /user:backupadmin cmd