Get Reverse-shell via Windows one-liner

This article will help those who play with CTF challenges, because today we will discuss “Windows One- Liner” to use malicious commands such as power shell or rundll32 to get reverse shell of the Windows system. Generally, while abusing HTTP services or other programs, we get RCE vulnerability. This loophole allows you to remotely execute any system command. We have therefore prepared a list of Windows commands that enable you to use the target machine to get reverse connections.

Table of Content

Mshta.exe

• Launch HTA attack via HTA Web Server of Metasploit

Rundll32.exe

• Launch Rundll32 Attack via SMB Delivery of Metasploit

Regsvr32.exe

• Launch Regsvr32 via Script Web Delivery of Metasploit

Certutil.exe

• Launch MSbuild Attack via Msfvenom C# shellcode

Powershell.exe

• Launch Powercat attack via Powershell
• Launch cscript.exe via Powershell
• Launch Batch File Attack via Powershell

Msiexec.exe

• Launch msiexec attack via msfvenom

Wmic.exe

• Launch Wmic.exe attack via Koadic

Full Article Read Here