https://solvere.app/tags/windows/ Recent content in Windows on Solvere Labs en-us contact@solvere.app (Solvere Labs) contact@solvere.app (Solvere Labs) © 2026 Solvere Labs Fri, 19 Jun 2026 00:00:00 +0000 https://solvere.app/icon-512.png https://solvere.app/tags/windows/ https://solvere.app/tutorials/guides/windows-download-methods/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transferwindowspowershellpost-exploitation https://solvere.app/tutorials/guides/windows-download-methods/ The Windows-native ways to pull a file when you have a shell on a Windows host: certutil, bitsadmin, PowerShell Invoke-WebRequest, WebClient, and the in-memory IEX cradle, with an honest look at how defenders see each one. https://solvere.app/tutorials/guides/smb-file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfersmbwindowsimpacketpost-exploitation https://solvere.app/tutorials/guides/smb-file-transfer/ Move files to and from a Windows target over SMB: stand up a share with impacket-smbserver, then pull, run, and push back with native copy / net use or smbclient. Quick reference with a modular cheat sheet and per-command breakdowns. https://solvere.app/tutorials/guides/http-file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfernetworkinglinuxwindowspost-exploitation https://solvere.app/tutorials/guides/http-file-transfer/ The HTTP file-transfer quick reference: serve a folder from your attacker box in one line, then pull files onto the target with wget, curl, certutil, PowerShell, or curl.exe. Flags, a modular cheat sheet, in-memory execution, upload-back with updog, checksum verification, and beating egress filters by serving on 80 or 443. https://solvere.app/tutorials/guides/file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transferpost-exploitationnetworkingwindowslinux https://solvere.app/tutorials/guides/file-transfer/ The file-transfer quick reference: the serve-and-pull vs push-and-receive decision, a modular copy-paste cheat sheet, and a worked breakdown of every method. Serve a folder over HTTP, pull with wget or certutil, host an SMB share, move a file with netcat or socat, copy over scp, paste a base64 blob, and checksum both ends. https://solvere.app/tutorials/guides/base64-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transferlinuxwindowspost-exploitation https://solvere.app/tutorials/guides/base64-transfer/ The base64 file-transfer quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Encode a file to one pasteable line, decode it with a heredoc, move files with certutil or PowerShell on Windows, chunk a blob too long to paste, and checksum both ends to prove it arrived intact. https://solvere.app/tutorials/guides/netexec/ Sat, 30 May 2026 00:00:00 +0000 Solvere Labs active-directorysmbenumerationwindowslinux https://solvere.app/tutorials/guides/netexec/ A practical NetExec guide: install it, verify it, enumerate one protocol at a time, validate credentials without locking accounts, read the output honestly, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/enum4linux-ng/ Mon, 18 May 2026 00:00:00 +0000 Solvere Labs smbenumerationwindowslinux https://solvere.app/tutorials/guides/enum4linux-ng/ The enum4linux-ng quick reference: the flags that matter, a modular copy-paste cheat sheet, and a worked breakdown of every real SMB and RPC situation. List shares anonymously, enumerate users and groups, dump the password policy, RID-cycle when direct enum is blocked, add credentials for depth, and export clean JSON or YAML. https://solvere.app/tutorials/guides/john/ Wed, 29 Apr 2026 00:00:00 +0000 Solvere Labs brute-forcelinuxwindows https://solvere.app/tutorials/guides/john/ The John the Ripper quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Identify a hash, convert a ZIP or SSH key with a *2john script, run wordlist and rule attacks, crack NT and sha512crypt, mask a known pattern, fork across CPU cores, and read the pot file honestly. https://solvere.app/tutorials/guides/ldapsearch/ Sun, 26 Apr 2026 00:00:00 +0000 Solvere Labs ldapactive-directoryenumerationwindowslinux https://solvere.app/tutorials/guides/ldapsearch/ The ldapsearch quick reference: the flags, a modular copy-paste cheat sheet, and a worked breakdown of every real task. Find the base DN from the Root DSE, bind anonymously or with credentials, list users and groups, enumerate computers, hunt Kerberoastable accounts, page past a size limit, and query over LDAPS. https://solvere.app/tutorials/guides/metasploit/ Sat, 25 Apr 2026 00:00:00 +0000 Solvere Labs reconlinuxwindows https://solvere.app/tutorials/guides/metasploit/ A practical Metasploit guide: install it, verify it, search modules, set options safely, validate findings with auxiliary checks, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/msfvenom/ Tue, 21 Apr 2026 00:00:00 +0000 Solvere Labs linuxwindows https://solvere.app/tutorials/guides/msfvenom/ A practical msfvenom guide: install it, verify it, pick a payload, set LHOST and LPORT, choose a format, generate controlled lab payloads, pair them with a handler, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/powerview/ Thu, 02 Apr 2026 00:00:00 +0000 Solvere Labs windowsactive-directoryenumerationpowershellreconldap https://solvere.app/tutorials/guides/powerview/ A practical PowerView guide for authorized AD labs: load the module, enumerate users, groups, ACLs, and trusts from a domain-joined host, read the output, and understand the defenses that watch it. https://solvere.app/tutorials/guides/winpeas/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs windowsprivilege-escalationenumerationpost-exploitation https://solvere.app/tutorials/guides/winpeas/ A practical WinPEAS guide: get the Windows privilege-escalation enumerator onto a target, read its color-coded output, focus on the high-signal findings, and avoid drowning in noise. https://solvere.app/tutorials/guides/smbmap/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs smbwindowsactive-directoryenumerationrecon https://solvere.app/tutorials/guides/smbmap/ The smbmap quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. List shares over a null session, read the READ/WRITE flags honestly, recurse a share, pull and push files, pass the hash, and run an authorized remote command. https://solvere.app/tutorials/guides/powerup/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs windowsprivilege-escalationenumerationpowershellpost-exploitationunquoted-service-path https://solvere.app/tutorials/guides/powerup/ A practical PowerUp guide: run the PowerSploit Windows privesc auditor, read its check output honestly, focus on the high-signal service and path findings, and keep it lab-safe. https://solvere.app/tutorials/guides/chisel/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs networkinglateral-movementchisellinuxwindowsssh https://solvere.app/tutorials/guides/chisel/ A practical Chisel guide: tunnel TCP and UDP over HTTP, build a reverse SOCKS pivot from a foothold, reach internal hosts, and keep the noise low in a lab. https://solvere.app/tutorials/guides/bloodhound/ Sat, 28 Mar 2026 00:00:00 +0000 Solvere Labs active-directorybloodhoundenumerationlateral-movementkerberoswindowsldap https://solvere.app/tutorials/guides/bloodhound/ A practical BloodHound guide: collect Active Directory graph data, ingest it, hunt attack paths to Domain Admin, and read the output without chasing dead ends. https://solvere.app/tutorials/guides/mimikatz/ Tue, 24 Mar 2026 00:00:00 +0000 Solvere Labs windowsactive-directorymimikatzpass-the-hashdcsyncpost-exploitation https://solvere.app/tutorials/guides/mimikatz/ A practical Mimikatz guide for authorized AD labs: what it extracts, the core modules, how to read the output, and the defenses that stop it. https://solvere.app/tutorials/guides/evil-winrm/ Fri, 20 Mar 2026 00:00:00 +0000 Solvere Labs windowsactive-directorywinrmevil-winrmpost-exploitationlateral-movement https://solvere.app/tutorials/guides/evil-winrm/ A practical Evil-WinRM guide: get an interactive WinRM shell on Windows with a password, hash, or certificate, move files, load scripts, and stay inside scope. https://solvere.app/tutorials/guides/nmap/ Wed, 18 Mar 2026 00:00:00 +0000 Solvere Labs networkingreconenumerationnmaplinuxwindows https://solvere.app/tutorials/guides/nmap/ The Nmap quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Ping-sweep a subnet, scan all 65535 ports, fingerprint service versions, run safe NSE scripts, scan UDP, get past a blocked ping, and save output for your notes. https://solvere.app/tutorials/guides/hashcat/ Thu, 12 Mar 2026 00:00:00 +0000 Solvere Labs brute-forcelinuxwindows https://solvere.app/tutorials/guides/hashcat/ The Hashcat quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Pick the exact hash mode, run dictionary, rule, mask, and hybrid attacks, crack NTLM, sha512crypt, WPA, and Kerberoast hashes, read the status screen, and resume long jobs. https://solvere.app/tutorials/guides/rpcclient/ Tue, 10 Mar 2026 00:00:00 +0000 Solvere Labs smbenumerationwindowslinux https://solvere.app/tutorials/guides/rpcclient/ The rpcclient quick reference: connection flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Open a null session, enumerate users, groups, RIDs, and shares, read the password policy, map names to SIDs, RID-cycle, authenticate with an NT hash, and read NT_STATUS errors honestly. https://solvere.app/tutorials/guides/impacket/ Thu, 26 Feb 2026 00:00:00 +0000 Solvere Labs active-directorysmbenumerationwindowslinux https://solvere.app/tutorials/guides/impacket/ A practical Impacket guide: install it, verify it, pick the right script, handle credential and hash syntax cleanly, read protocol errors honestly, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/smbclient/ Tue, 17 Feb 2026 00:00:00 +0000 Solvere Labs smbenumerationwindowslinux https://solvere.app/tutorials/guides/smbclient/ The smbclient quick reference: flags, a modular cheat sheet, and a worked breakdown of every real situation. List shares over a null session, browse a share interactively, pull one file or a whole tree, pass-the-hash, force an SMB dialect, grab a share as a tar, and debug a refused connection. https://solvere.app/tutorials/guides/responder/ Wed, 04 Feb 2026 00:00:00 +0000 Solvere Labs active-directorysmbnetworkingwindowslinux https://solvere.app/tutorials/guides/responder/ A practical Responder guide: install it, pick the right interface, start in analyze mode, capture lab name-resolution traffic safely, read the output honestly, and keep a cheat sheet you will actually reuse.