{"id":1797,"date":"2020-12-15T14:13:09","date_gmt":"2020-12-15T13:13:09","guid":{"rendered":"https:\/\/andreas-klingler.de\/infosec\/?p=1797"},"modified":"2024-08-19T19:10:15","modified_gmt":"2024-08-19T17:10:15","slug":"seatbelt","status":"publish","type":"post","link":"https:\/\/infosec.andreas-klingler.de\/?p=1797","title":{"rendered":"Seatbelt"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Auto\u00admates Win\u00addows enu\u00admer\u00ada\u00adtion. <a href=\"https:\/\/github.com\/GhostPack\/Seatbelt\">Github page<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Usage<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Seatbelt.exe -group=all<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Run Seatbelt.exe with\u00adout argu\u00adments to see pos\u00adsi\u00adble para\u00adme\u00adters. Example<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Seatbelt.exe OSInfo Processes<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Remote<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">From anoth\u00ader Win\u00addows sys\u00adtem, seat\u00adbelt can con\u00adnect to a vic\u00adtim and per\u00adform com\u00admands&nbsp;there.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Seatbelt.exe LogonSessions -computername=$victim -username=bob -password=bobber<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Command aggregation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There are already some groups defined which per\u00adform mul\u00adti\u00adple tests at&nbsp;once.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">Seatbelt.exe -group=system [-computername=...]<br>Seatbelt.exe -group=remote [-computername=\u2026]<br>Seatbelt.exe -group=user [-computername=\u2026]<br>Seatbelt.exe -group=misc [-computername=\u2026]<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Auto\u00admates Win\u00addows enu\u00admer\u00ada\u00adtion. Github page Usage Seatbelt.exe \u2011group=all Run Seatbelt.exe with\u00adout argu\u00adments to see pos\u00adsi\u00adble para\u00adme\u00adters. Exam\u00adple Seatbelt.exe OSIn\u00adfo Process\u00ades Remote From anoth\u00ader Win\u00addows sys\u00adtem, seat\u00adbelt can con\u00adnect to a vic\u00adtim and per\u00adform com\u00admands&nbsp;there. Seatbelt.exe LogonS\u00ades\u00adsions \u2011computername=$victim \u2011username=bob \u2011password=bobber Com\u00admand aggre\u00adga\u00adtion There are already some groups defined which per\u00adform mul\u00adti\u00adple tests at&nbsp;once. Seatbelt.exe \u2011group=system [-computername=\u2026]Seatbelt.exe [\u2026]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[471],"tags":[50,53,298,24],"class_list":["post-1797","post","type-post","status-publish","format-standard","hentry","category-privesc","tag-enumeration","tag-privilege-escalation","tag-seatbelt","tag-windows"],"_links":{"self":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/1797","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1797"}],"version-history":[{"count":2,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/1797\/revisions"}],"predecessor-version":[{"id":4096,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/1797\/revisions\/4096"}],"wp:attachment":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1797"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1797"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}