master
1REMOTING
2
3TASKLIST
4 tasklist /s remote host /u domain\user /p password cmd
5SYSTEMINFO
6 systeminfo /s system /u domain\user /p password
7PSEXEC
8 psexec \\computername -u user -p password -s (run command as system) cmd (opens a cmd window)
9POWERSHELL -WMI
10note: using credentials in a cmd only works with WMI
11 cmd -ComputerName win7 (this only works without user/pwd because local credentials are the same on both systems)
12 cmd -computername win10 -credential barney (prompts for pwd)
13 $c = get-credential -credential barney - Stores the username and pwd for future cmds
14Create Multi cmd Sessions
15 $session7 = new-PSSession -computername win7
16 $session10 = new-PSSession -computername win10 -credential $c
17POWERSHELL CIM
18note: CIM you must first open a session with the remote system and then reference that session in your CIM cmdlet
19 $c = New-CimSession -computername win10 -credential fred
20 $c | Get-CimInstance -ClassName Win32_Service | where state -match 'running'
21
22WMIC
23 wmic /node:computer /user:username /password:pwd
24 you can enable all privleges using /privileges:enable
25PSLOGLIST
26 psloglist \\computername -u username -p password
27wevtutil
28 wevtutil /r:computer /u:user /p:pwd
29REG FIND
30 -m \\machiname
31
32ds commnads
33
34-s Server | -d Domain}]
35 [-u UserName] [-p {Password