cmd

Windows and Active Directory

The old Windows command prompt, cmd.exe. It is clumsy compared to PowerShell, but it is on every Windows machine ever shipped, which is why attack write-ups still use it.

Related terms

PowerShell

shell

Appears in(168)

tcpdump FundamentalsTraffic Analysis
BPF FiltersTraffic Analysis
Dissecting Traffic in WiresharkTraffic Analysis
Cookies, Sessions, and AuthWeb and HTTP
CVEs and CVSSVulnerabilities and Exploitation
Injection and XSSVulnerabilities and Exploitation
IDOR and SSRFVulnerabilities and Exploitation
Hashing and Password SecurityVulnerabilities and Exploitation
Linux Privilege EscalationVulnerabilities and Exploitation
Approaching a TargetCTF Methodology
From Enumeration to FootholdCTF Methodology
From Foothold to RootCTF Methodology
PKI and CertificatesCryptography
How Passwords Are StoredPassword Attacks
Wordlists and RulesPassword Attacks
Cracking with HashcatPassword Attacks
Online vs Offline AttacksPassword Attacks
Enumerating Active DirectoryActive Directory
Kerberos and KerberoastingActive Directory
Common AD AttacksActive Directory
Phishing and PretextingSocial Engineering
Physical and OSINTSocial Engineering
Defending PeopleSocial Engineering
Windows Architecture and ProcessesWindows Fundamentals
The Windows RegistryWindows Fundamentals
Windows Permissions and PrivilegesWindows Fundamentals
Images and DockerfilesDocker and Containers
SQL InjectionWeb Application Attacks
Cross-Site ScriptingWeb Application Attacks
Command InjectionWeb Application Attacks
File Upload AttacksWeb Application Attacks
Server-Side Request ForgeryWeb Application Attacks
Insecure DeserializationWeb Application Attacks
Access Control and IDORWeb Application Attacks
Metasploit FundamentalsThe Metasploit Framework
Finding and Running ExploitsThe Metasploit Framework
MeterpreterThe Metasploit Framework
Payloads with msfvenomThe Metasploit Framework
Post-ExploitationThe Metasploit Framework
A Repeatable Privesc MethodLinux Privilege Escalation
SUID Binaries and SudoLinux Privilege Escalation
Cron Jobs and PATH AbuseLinux Privilege Escalation
Kernel Exploits and CapabilitiesLinux Privilege Escalation
Automated EnumerationLinux Privilege Escalation
A Repeatable Windows Privesc MethodWindows Privilege Escalation
Service MisconfigurationsWindows Privilege Escalation
Token ImpersonationWindows Privilege Escalation
Dangerous Privileges and InstallersWindows Privilege Escalation
Hunting for CredentialsWindows Privilege Escalation
How Wi-Fi WorksWireless Security
Capturing and Cracking a HandshakeWireless Security
Defending a Wireless NetworkWireless Security
Profiling PeopleOpen Source Intelligence
Mapping Infrastructure and DomainsOpen Source Intelligence
Google DorkingOpen Source Intelligence
OSINT ToolingOpen Source Intelligence
Forensics Fundamentals and Chain of CustodyDigital Forensics
Disk and File System ForensicsDigital Forensics
Memory ForensicsDigital Forensics
Network ForensicsDigital Forensics
Building a TimelineDigital Forensics
The Incident Response LifecycleIncident Response
Detection and TriageIncident Response
Containment, Eradication, RecoveryIncident Response
Log Analysis for RespondersIncident Response
Writing the Incident ReportIncident Response
Alerts and TriageSOC Analyst Fundamentals
The MITRE ATT&CK FrameworkSOC Analyst Fundamentals
Working a ShiftSOC Analyst Fundamentals
Escalation and HandoffSOC Analyst Fundamentals
Log Sources That MatterSIEM and Log Analysis
Correlation and AlertingSIEM and Log Analysis
Tuning Out the NoiseSIEM and Log Analysis
Hunting in LogsThreat Hunting
Documenting a HuntThreat Hunting
Analyzing Malware SafelyMalware Analysis
Static Analysis BasicsMalware Analysis
Dynamic Analysis BasicsMalware Analysis
Strings and UnpackingMalware Analysis
Writing the Analysis ReportMalware Analysis
Firewalls and RulesetsNetwork Defense
IDS and IPSNetwork Defense
Network SegmentationNetwork Defense
VPNs and Zero TrustNetwork Defense
Detecting Lateral MovementNetwork Defense
Common Cloud MisconfigurationsCloud Security Fundamentals
Storage ExposureCloud Security Fundamentals
AWS Building Blocks for SecurityAWS Security
AWS IAM in DepthAWS Security
S3 SecurityAWS Security
Enumerating AWS With KeysAWS Security
Detection in AWSAWS Security
Pods, Services, and RBACKubernetes Security
Common Cluster MisconfigurationsKubernetes Security
Attacking a ClusterKubernetes Security
Hardening a ClusterKubernetes Security
The OWASP API Top 10API Security
Broken Object Level AuthorizationAPI Security
API Authentication FlawsAPI Security
Testing an APIAPI Security
Assembly Crash CourseIntroduction to Binary Exploitation
Stack Buffer OverflowsIntroduction to Binary Exploitation
Controlling ExecutionIntroduction to Binary Exploitation
Introduction to ShellcodeIntroduction to Binary Exploitation
Reverse Engineering FundamentalsReverse Engineering
Static Analysis With GhidraReverse Engineering
Dynamic Analysis With GDBReverse Engineering
Patching BinariesReverse Engineering
Anti-Analysis TricksReverse Engineering
Security FrameworksGovernance, Risk, and Compliance
Audits and ComplianceGovernance, Risk, and Compliance
Policies People Actually FollowGovernance, Risk, and Compliance
The Intelligence LifecycleCyber Threat Intelligence
IOCs and TTPsCyber Threat Intelligence
Putting CTI to WorkCyber Threat Intelligence
What Detection Engineering IsDetection Engineering
Sigma and YARADetection Engineering
Testing and Tuning DetectionsDetection Engineering
Input Validation and Output EncodingSecure Coding
Managing SecretsSecure Coding
Dependencies and Supply ChainSecure Coding
Security Code ReviewSecure Coding
Android App InternalsMobile Application Security
iOS App InternalsMobile Application Security
Testing a Mobile AppMobile Application Security
Firmware BasicsIoT and OT Security
Common IoT WeaknessesIoT and OT Security
Defending Connected DevicesIoT and OT Security
Encoding Is Not EncryptionCryptographic Attacks
Attacking Weak HashingCryptographic Attacks
Padding Oracle AttacksCryptographic Attacks
Recognizing Bad CryptoCryptographic Attacks
The Report Is the ProductWriting Security Reports
Structuring a ReportWriting Security Reports
Rating Risk HonestlyWriting Security Reports
Building a Portfolio That Gets NoticedBreaking Into Security
Server-Side Template InjectionAdvanced Web Attacks
Prototype PollutionAdvanced Web Attacks
HTTP Request SmugglingAdvanced Web Attacks
Race ConditionsAdvanced Web Attacks
Attacking GraphQLAdvanced Web Attacks
Building a Vuln Management ProgramVulnerability Management
Scanning and Authenticated ScansVulnerability Management
Prioritizing With ContextVulnerability Management
Remediation and SLAsVulnerability Management
Authentication vs AuthorizationIdentity and Access Management
SSO and FederationIdentity and Access Management
Privileged Access ManagementIdentity and Access Management
The Identity LifecycleIdentity and Access Management
What Zero Trust Really MeansZero Trust Architecture
MicrosegmentationZero Trust Architecture
Rolling Out Zero TrustZero Trust Architecture
SPF, DKIM, and DMARCEmail Security
Investigating a PhishEmail Security
How DNS Really WorksDNS and Network Services Security
DNS AttacksDNS and Network Services Security
Securing DNSDNS and Network Services Security
DHCP and NTP RisksDNS and Network Services Security
Monitoring Network ServicesDNS and Network Services Security
Dependency RiskSoftware Supply Chain Security
SBOM and InventorySoftware Supply Chain Security
Securing CI/CDSoftware Supply Chain Security
Signing and ProvenanceSoftware Supply Chain Security
Classifying DataData Protection and Privacy
Encryption at Rest and in TransitData Protection and Privacy
Key ManagementData Protection and Privacy
Data Loss PreventionData Protection and Privacy
Privacy Laws That BiteData Protection and Privacy