Windows Red Team Persistence Techniques | Persistence With PowerShell Empire

[@korovamilkplus]

I'm glad I took this course and learned the basics of PowerShell-Empire/Starkiller, which I barely knew before (it's briefly mentioned in PTSv2). However, after many attempts and many hours "lost," I can say that today Windows Defender can block almost everything. In addition to the aforementioned powershell/privesc/bypass, which only works with Windows Defender disabled (and even requires user input LOL), persistence techniques are also easily blocked. Both registry method and scheduled task method at Windows reboot do not reconnect to the Listener, and a quick look at the Windows Defender history shows that they are blocked easily. In practice, the only thing that still works is Invoke-Obfuscation! :,) Anyway, as always, thank Alexis for using your time to share your knowledge with everyone for free. See you soon!

[@rudrasalaria3431]

You are great teacher. Seriously. Your skill are amazing. I am your fan. Lots of love from India. 🇮🇳

[@djmeezymeez940]

Another one from hackersploit 🔥🔥🔥

[@kastakastakasta2933]

kzbin.info/www/bejne/gWTXZ32caNuohtk

[@mohadioum3314]

yayyyyyy Fav Teacher back again with another video ( hackersploit voice )

[@mohammed-jb5ic]

Hackersploit Back again with another video😍

[@rayane2290]

for you guys

[@Chris-zc9bp]

I did learn some from this. But non of the persistence techniques seem to work on WIn 10 anymore. Spent all day trying

[@rayane2290]

It s ennificient I find that hackers can't send the infectious.xls with defender windows enable . I guess there is some code to disable windows defender or make the infectious files stealth ?

[@chandraprakashpandian]

💥💥💥

[@javiercherin]

Hey guys i have a question, i need to protect windows in passive mode against linux cd usb, there is a way i can do that ?🤔 Because i try with bios UEFI secure boot but him just take of the bios battery reset password disabled secure boot... Total encryption is no admissible actually because difficulty to reach access in case we need recover something, so i am looking by something in a windows file system level ? I need block him to replace magnify by cmd... Ty in advance.

[@maddinmanek8679]

Probably protecting physical access?

[@javiercherin]

@@maddinmanek8679 ty, yeas i guess i will need some kind of key lock physically. Would be nice be at the top of the food chain by blocking access in a binary way and show muscle 💪🏻 😁 hope i can do something at a binary level like encrypt just windows folder, that would be nice 🙂

[@kastakastakasta2933]

kzbin.info/www/bejne/gWTXZ32caNuohtk

[@shadowintel_]

As always great video keep it doing 😊

[@kastakastakasta2933]

Check this one out kzbin.info/www/bejne/gWTXZ32caNuohtk

[@8080VB]

Useful , also its better to take a snapshot before trying .

[@kastakastakasta2933]

kzbin.info/www/bejne/gWTXZ32caNuohtk

[@honorvirtue2904]

Perfect as always 😎

[@marlymutos1000]

Thanks for the knowledge

[@kastakastakasta2933]

kzbin.info/www/bejne/gWTXZ32caNuohtk

[@Sh3lld0n]

Hello sir! Can I download your videos from link in the web site?

[@ramnikTDM]

Why not of course

[@ramnikTDM]

We can

[@kastakastakasta2933]

kzbin.info/www/bejne/gWTXZ32caNuohtk

[@rahulramteke3338]

Good stuff Keep up the good work

[@kastakastakasta2933]

kzbin.info/www/bejne/gWTXZ32caNuohtk

[@50_Pence]

Anyone else have problems getting PE to work on the last few builds of kali?

[@kastakastakasta2933]

kzbin.info/www/bejne/gWTXZ32caNuohtk

[@fafnirgolga2394]

Most commentors of this channel should take a complete Linux basic course to stop asking basic questions....

[@kastakastakasta2933]

kzbin.info/www/bejne/gWTXZ32caNuohtk

[@arcane2024]

Every time when I use *Metasploit* with my *Windows 10* _command prompt._ it shows me an *error* like this: *Unable to load the EventMachine C extension; To use the pure-ruby reactor, require 'em/pure_ruby'*

[@disrael2101]

Missing packages to run it

[@arcane2024]

@@disrael2101 What should i do

[@itzzbayzz]

@@arcane2024 why not just run it in linux?

[@arcane2024]

@@itzzbayzz Today I installed kali linux in virtual box. Now it is working fin. thanks

[@arcane2024]

*_Thanks for everyone who help_*

[@exploitnerd5049]

Love it

[@kastakastakasta2933]

kzbin.info/www/bejne/gWTXZ32caNuohtk

[@ramnikTDM]

💀😈

[@sanskar894]

First💀

[@ayyamguari6134]

Please add English subtitles to your videos sir

[@sandeepr7141]

Why? His accent is understandable

[@Hoax711]

@@sandeepr7141 I don’t think it is the man’s English that is the problem but some people need the subtitles to better understand what is being said (regardless of if the speaker “has an accent”))