diff --git a/persistence/windows/general.md b/persistence/windows/general.md index 71336ba..241ab27 100644 --- a/persistence/windows/general.md +++ b/persistence/windows/general.md @@ -67,6 +67,7 @@ c:\> gpupdate /Force c:\> net start "terminal services" + ### Scheduler The [Windows scheduler](http://support.microsoft.com/kb/313565) can be used to further compromise a system. It usually runs at the SYSTEM account privilege level. According to Val Smith's and Colin Ames' [BlackHat 2008 presentation (page 58)](http://www.blackhat.com/presentations/bh-usa-08/Smith_Ames/BH_US_08_Smith_Ames_Meta-Post_Exploitation.pdf), you can remotely schedule tasks using the commands below.