Ceso Adventures

Blogs, Security CTFs & Tutorials


Windows

Trusted Folders

accesschk.exe "ceso" C:\ -wus
  -> -w is to locate writable directories
  -> -u supress errors
  -> -s makes recursion on all subdirectories

icacls.exe C:\Windows\Tasks
  ^-- Verify if Tasks has execution permissions for example (flag is "RX")

Check OS Information

systeminfo
ver

Check Architecture

Without PowerShell

wmic os get osarchitecture
echo %PROCESSOR_ARCHITECTURE%

With PowerShell

[Environment]::Is64BitProcess

Check the Type of Language available with Powershell

$ExecutionContext.SessionState.LanguageMode

Possible types are:
  - Full Language
  - RestrictedLanguage
  - No Language
  - Constrained Language