dir /a ---> should show hidden folders.
dir /a:d ---> shows all directories.
dir /a:h ---> shows all hidden files.
PWD command for Windows
<?php
echo shell_exec("echo %cd%");
?>
shell_exec() VS system() VS exec()
shell_exec — Execute command via shell and return the complete output as a string
system — Execute an external program and display the output
exec — Execute an external program
# More info here:
https://www.php.net/manual/en/function.exec.php
https://www.php.net/manual/en/function.system.php
https://www.php.net/manual/en/function.shell-exec.php
List VHD with 7z
7z l filename.vhd
Use PSExec to login to the target.
Located in:
/usr/share/doc/python-impacket/examples/psexec.py
Execute:
python psexec.py administrator@10.10.10.10