03 Windows Privilege Escalation: PowerShell Password Goldmine & Automated Enumeration скачать в хорошем качестве

03 Windows Privilege Escalation: PowerShell Password Goldmine & Automated Enumeration

Admins think Clear-History protects them... it doesn't. There's a hidden file that records EVERYTHING including passwords. This video has 2 parts: PART 1: Manual PowerShell history exploitation (finding admin passwords) PART 2: Automated enumeration with WinPEAS (and why tools miss things) What You'll Learn: ✅ Why Clear-History doesn't actually work ✅ Finding the hidden PSReadline history file ✅ Reading PowerShell transcript files ✅ Extracting admin credentials (username + password) ✅ Using Evil-WinRM for stable access ✅ Running WinPEAS for automated enumeration ✅ Why automated tools miss critical findings The Two Password Files Admins Forget: 1. PSReadline History: C:\Users\*\AppData\...\ConsoleHost_history.txt 2. PowerShell Transcripts: C:\Users\Public\Transcripts\*.txt ⏱️ Timestamps: 00:00 - Why Clear-History Fails 00:00 - PowerShell Logging Types 00:00 - STEP 1-3: Initial Access 00:00 - STEP 4-5: Finding PSReadline History 00:00 - First Password Found! 00:00 - STEP 6-7: Reading Transcript Files 00:00 - STEP 8: Understanding PowerShell Credentials 00:00 - PART 2: WinPEAS Automated Enumeration 00:00 - Setting Up WinPEAS 00:00 - Analyzing WinPEAS Output 00:00 - What WinPEAS Found vs Missed 00:00 - The Balanced Approach: Manual + Automated 📚 Series Progress: ✅ Part 1: Windows Security Model ✅ Part 2: Enumeration Framework 👉 Part 3: PowerShell History + WinPEAS (THIS VIDEO) ⚠️ LEGAL DISCLAIMER: Educational content for authorized testing only. Always get written permission before testing systems. #WindowsPrivilegeEscalation #PowerShell #WinPEAS #OSCP #PenetrationTesting #EthicalHacking Subscribe for Part 4: Service Exploitation & Unquoted Paths! TAGS: convertto-securestring, pscredential, windows enumeration tools, manual vs automated enumeration, winpeas tutorial, windows privesc, privesc techniques, password discovery, windows logging exploitation, powershell audit bypass, history file exploitation, windows security audit, red team, blue team, cybersecurity training ‪@RealTryHackMe‬