OPSECTLAS you are here: Essentials
Essentials

Post-Exploitation Checklist

reference 21 commands

  1. Recon
  2. Enumerate
  3. Foothold
  4. PrivEsc
  5. Lateral
  6. Post-Ex
Proof Files

Linux proof file

cat /root/proof.txt     # OSCP / PG standard location
cat /root/local.txt     # Sometimes used for low-priv proof
hostname && id && cat /root/proof.txt && ip a   # Full proof screenshot

Windows proof file (SYSTEM level)

type C:\Users\Administrator\Desktop\proof.txt
type C:\Documents and Settings\Administrator\Desktop\proof.txt
whoami && hostname && type C:\Users\Administrator\Desktop\proof.txt && ipconfig

Screenshot requirement: command showing proof + whoami + hostname

What to Capture Before Moving On

Linux

id && whoami
hostname
cat /etc/passwd
cat /etc/shadow 2>/dev/null
ip a
netstat -tlnp
cat /root/proof.txt
find / -name "*.txt" -o -name "*.conf" -o -name "*.bak" 2>/dev/null | grep -v proc

Windows

whoami /all
hostname
ipconfig /all
netstat -ano
net user
net localgroup administrators
type C:\Users\Administrator\Desktop\proof.txt