Pentester's Promiscuous Notebook
BlogGitHubTwitter
Search…
README
⚒️ Pentest
C2
Infrastructure
AD
DevOps
DBMS
Authentication Brute Force
File Transfer
IPMI
Kiosk Breakout
Low-Hanging Fruits
LPE
Networks
NFS
Persistence
Pivoting
Post Exploitation
SNMP
TFTP
VNC
Misc
OSINT
Password Brute Force
Perimeter
Shells
Web
Wi-Fi
⚔️ Red Team
Basics
Cobalt Strike
Infrastructure
Malware Development
SE
⚙️ Admin
Git
Linux
Networking
Virtualization
Windows
Powered By GitBook
Kiosk Breakout

Windows

Navigating with environment variables and shell directive:
ENV
Location
%HOMEDRIVE%, %SystemDrive%
"C:\"
%WINDIR%, %SystemRoot%
"C:\Windows"
%PROGRAMFILES%
"C:\Program Files"
%COMSPEC%
"C:\Windows\System32\cmd.exe"
%COMMONPROGRAMFILES%
"C:\Program Files\Common Files"
%HOMEPATH%, %USERPROFILE%
"C:\Documents and Settings\Username"
%ALLUSERSPROFILE%
"C:\Documents and Settings\All Users"
%PROGRAMFILES(X86)%
"C:\Program Files (x86)" (only in 64-bit version)
%APPDATA%
"C:\Documents and Settings\Username\Application Data"
%TEMP%, %TMP%
"C:\Documents and Settings\Username\Local Settings\Temp"
%COMMONPROGRAMFILES(x86)%
"C:\Program Files (x86)\Common Files" (only in 64-bit version)
Command
Location
shell:System
"C:\Windows\System32"
shell:Downloads
Current user's "Downloads" folder
shell:MyComputerFolder
"This PC" window

Linux

gtkdialog

HTLM-based pseudo terminal emulator (useful when there's no other terminal apps available):
shell.html
<window>
<vbox>
<vbox scrollable="true" width="500" height="400">
<edit>
<variable>CMDOUTPUT</variable>
<input file>/tmp/termout.txt</input>
</edit>
</vbox>
<hbox>
<text><label>Command:</label></text>
<entry><variable>CMDTORUN</variable></entry>
<button>
<label>Run</label>
<action>$CMDTORUN > /tmp/termout.txt 2>&1</action>
<action>refresh:CMDOUTPUT</action>
</button>
</hbox>
</vbox>
</window>
The shell can be invoked with /usr/bin/gtkdialog -f shell.html
Previous
IPMI
Next
Low-Hanging Fruits
Last modified 9mo ago
Copy link
Outline
Windows
Linux
gtkdialog