~/Privilege Escalation/Windows/Binaries# cat Netsh.exe.md

Netsh is a Windows tool used to manipulate network interface settings.

Paths:

C:\WINDOWS\System32\Netsh.exe
C:\WINDOWS\SysWOW64\Netsh.exe

Detection: Netsh initiating a network connection

Execute

Use Netsh in order to execute a .dll file and also gain persistence, every time the netsh command is called

netsh.exe add helper C:\Users\User\file.dll