windows-persistence.md (3875B)
1 --- 2 title: "Windows - Persistence" 3 topic: "Methodology and Resources" 4 topicSlug: "methodology-and-resources" 5 sourcePath: "Methodology and Resources/Windows - Persistence.md" 6 sourceUrl: "https://github.com/swisskyrepo/PayloadsAllTheThings/blob/3ac27901c711/Methodology%20and%20Resources/Windows%20-%20Persistence.md" 7 sha: "3ac27901c711" 8 isReadme: false 9 --- 10 11 # Windows - Persistence 12 13 :warning: Content of this page has been moved to [InternalAllTheThings/redteam/persistence/windows](/internal/redteam/persistence/windows-persistence) 14 15 - [Tools](/internal/redteam/persistence/windows-persistence#tools) 16 - [Hide Your Binary](/internal/redteam/persistence/windows-persistence#hide-your-binary) 17 - [Disable Antivirus and Security](/internal/redteam/persistence/windows-persistence#disable-antivirus-and-security) 18 - [Antivirus Removal](/internal/redteam/persistence/windows-persistence#antivirus-removal) 19 - [Disable Windows Defender](/internal/redteam/persistence/windows-persistence#disable-windows-defender) 20 - [Disable Windows Firewall](/internal/redteam/persistence/windows-persistence#disable-windows-firewall) 21 - [Clear System and Security Logs](/internal/redteam/persistence/windows-persistence#clear-system-and-security-logs) 22 - [Simple User](/internal/redteam/persistence/windows-persistence#simple-user) 23 - [Registry HKCU](/internal/redteam/persistence/windows-persistence#registry-hkcu) 24 - [Startup](/internal/redteam/persistence/windows-persistence#startup) 25 - [Scheduled Tasks User](/internal/redteam/persistence/windows-persistence#scheduled-tasks-user) 26 - [BITS Jobs](/internal/redteam/persistence/windows-persistence#bits-jobs) 27 - [Serviceland](/internal/redteam/persistence/windows-persistence#serviceland) 28 - [IIS](/internal/redteam/persistence/windows-persistence#iis) 29 - [Windows Service](/internal/redteam/persistence/windows-persistence#windows-service) 30 - [Elevated](/internal/redteam/persistence/windows-persistence#elevated) 31 - [Registry HKLM](/internal/redteam/persistence/windows-persistence#registry-hklm) 32 - [Winlogon Helper DLL](/internal/redteam/persistence/windows-persistence) 33 - [GlobalFlag](/internal/redteam/persistence/windows-persistence) 34 - [Startup Elevated](/internal/redteam/persistence/windows-persistence#startup-elevated) 35 - [Services Elevated](/internal/redteam/persistence/windows-persistence#services-elevated) 36 - [Scheduled Tasks Elevated](/internal/redteam/persistence/windows-persistence#scheduled-tasks-elevated) 37 - [Binary Replacement](/internal/redteam/persistence/windows-persistence#binary-replacement) 38 - [Binary Replacement on Windows XP+](/internal/redteam/persistence/windows-persistence#binary-replacement-on-windows-xp) 39 - [Binary Replacement on Windows 10+](/internal/redteam/persistence/windows-persistence#binary-replacement-on-windows-10) 40 - [RDP Backdoor](/internal/redteam/persistence/windows-persistence#rdp-backdoor) 41 - [utilman.exe](/internal/redteam/persistence/windows-persistence#utilman.exe) 42 - [sethc.exe](/internal/redteam/persistence/windows-persistence#sethc.exe) 43 - [Remote Desktop Services Shadowing](/internal/redteam/persistence/windows-persistence#remote-desktop-services-shadowing) 44 - [Skeleton Key](/internal/redteam/persistence/windows-persistence#skeleton-key) 45 - [Virtual Machines](/internal/redteam/persistence/windows-persistence#virtual-machines) 46 - [Windows Subsystem for Linux](/internal/redteam/persistence/windows-persistence#windows-subsystem-for-linux) 47 - [Domain](/internal/redteam/persistence/windows-persistence#domain) 48 - [Golden Certificate](/internal/redteam/persistence/windows-persistence#golden-certificate) 49 - [Golden Ticket](/internal/redteam/persistence/windows-persistence#golden-ticket) 50 - [References](/internal/redteam/persistence/windows-persistence#references)