# Autoruns

## Steps:

####

```
Autoruns64.exe (Sysinternals)
```

#### 2: Logon Tab

#### 3: Find directory to overwrite other programs with payload. Check with

```
Accesschk64.exe -wvu
```

#### 4: Metasploit Handler

#### 5: msfvenom

#### 6: Transfer payload

#### 7: Copy payload to directory to overwrite original program

#### 8: Wait for logon and connect
