Post-exploitation on Linux

PowerShell is primarily associated with Windows environments, and its functionality on Linux is limited. However, with the introduction of PowerShell Core (now known as PowerShell 7), a cross-platform version of PowerShell, it has become possible to use PowerShell for post-exploitation on Linux. Although PowerShell on Linux doesn’t have the same extensive functionality as Windows, it can still be utilized for specific tasks during post-exploitation.

Establishing persistence

On Linux, persistence can be achieved by setting up a cron job to execute a PowerShell script at regular intervals. Here’s an example of a basic cron job:

# Edit crontab
crontab -e
# Add the following line to run a PowerShell script every minute
* * * * * /usr/bin/pwsh /path/to/persistence.ps1

The persistence.ps1 PowerShell script can contain code for maintaining access or setting up backdoors.

Privilege escalation

PowerShell on Linux can be used to check...