> For the complete documentation index, see [llms.txt](https://www.heresecurity.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.heresecurity.wiki/quan-xian-wei-chi.md).

# 权限维持

- [Windows](https://www.heresecurity.wiki/quan-xian-wei-chi/windows.md)
- [关闭防病毒软件](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/guan-bi-fang-bing-du-ruan-jian.md)
- [启动文件夹](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/qi-dong-wen-jian-jia.md)
- [DLL劫持计划任务](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dll-jie-chi-ji-hua-ren-wu.md)
- [DLL注入](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dll-zhu-ru.md)
- [DSRM+注册表ACL后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dsrm+-zhu-ce-biao-acl-hou-men.md)
- [Empire](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/empire.md)
- [Guest激活](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/guest-ji-huo.md)
- [HookPasswordChangeNotify](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/hookpasswordchangenotify.md)
- [Invoke ADSBackdoor](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/invoke-adsbackdoor.md)
- [Invoke Tasks后门&权限维持](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/invoke-tasks-hou-men-quan-xian-wei-chi.md)
- [Kerberoasting后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/kerberoasting-hou-men.md)
- [Metsvc](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/metsvc.md)
- [MOF](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/mof.md)
- [Shadow-Credentials](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/shadow-credentials.md)
- [ADS\&JavaScript](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ads-and-javascript.md)
- [ADS隐藏webshell](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ads-yin-cang-webshell.md)
- [Bitadmin](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/bitadmin.md)
- [CLR Injection](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/clr-injection.md)
- [COM OBJECT hijacking](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/com-object-hijacking.md)
- [DCShadow\&SIDHistory](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dcshadow-and-sidhistory.md)
- [DCSync后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dcsync-hou-men.md)
- [DLL代理劫持右键](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dll-dai-li-jie-chi-you-jian.md)
- [DLL劫持](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dll-jie-chi.md)
- [Persistence](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/persistence.md)
- [RID劫持](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/rid-jie-chi.md)
- [rootkit](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/rootkit.md)
- [RPC后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/rpc-hou-men.md)
- [S4U2Self后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/s4u2self-hou-men.md)
- [Skeleton Key万能钥匙](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/skeleton-key-wan-neng-yao-shi.md)
- [Squibledoo](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/squibledoo.md)
- [Windows FAX DLL Injection](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/windows-fax-dll-injection.md)
- [WinRM端口复用](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/winrm-duan-kou-fu-yong.md)
- [WMIC事件订阅](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/wmic-shi-jian-ding-yue.md)
- [WMI Persistence](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/wmi-persistence.md)
- [创建服务](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/chuang-jian-fu-wu.md)
- [登录初始化](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/deng-lu-chu-shi-hua.md)
- [MSSQL后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/mssql-hou-men.md)
- [Netsh Helper DLL](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/netsh-helper-dll.md)
- [NPPSpy记录密码](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/nppspy-ji-lu-mi-ma.md)
- [NSSM](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/nssm.md)
- [Password Filter DLL](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/password-filter-dll.md)
- [添加签名](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/tian-jia-qian-ming.md)
- [通过控制面板加载项维持权限](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/tong-guo-kong-zhi-mian-ban-jia-zai-xiang-wei-chi-quan-xian.md)
- [通过自定义.net垃圾回收机制进行DLL注入](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/tong-guo-zi-ding-yi-.net-la-ji-hui-shou-ji-zhi-jin-xing-dll-zhu-ru.md)
- [唯一IP访问](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/wei-yi-ip-fang-wen.md)
- [影子用户](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ying-zi-yong-hu.md)
- [映像劫持](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ying-xiang-jie-chi.md)
- [注入SSP被动收集密码](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/zhu-ru-ssp-bei-dong-shou-ji-mi-ma.md)
- [基于域策略文件权限后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ji-yu-yu-ce-le-wen-jian-quan-xian-hou-men.md)
- [计划任务](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ji-hua-ren-wu.md)
- [进程注入](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/jin-cheng-zhu-ru.md)
- [使用AMSI扫描接口维持权限](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/shi-yong-amsi-sao-miao-jie-kou-wei-chi-quan-xian.md)
- [受限委派后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/shou-xian-wei-pai-hou-men.md)
- [Linux](https://www.heresecurity.wiki/quan-xian-wei-chi/linux.md)
- [apt后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/apt-hou-men.md)
- [bash rc](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/bash-rc.md)
- [Kbeast\_rootkit](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/kbeast_rootkit.md)
- [Linux cron后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/linux-cron-hou-men.md)
- [OpenSSH后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/openssh-hou-men.md)
- [Reptile](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/reptile.md)
- [SSHD后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/sshd-hou-men.md)
- [SSH wrapper后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/ssh-wrapper-hou-men.md)
- [SSH公私钥登录](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/ssh-gong-si-yao-deng-lu.md)
- [Strace记录ssh密码](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/strace-ji-lu-ssh-mi-ma.md)
- [SUID Shell](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/suid-shell.md)
- [进程注入](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/jin-cheng-zhu-ru.md)
- [文件处理](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/wen-jian-chu-li.md)
- [用户启动文件](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/yong-hu-qi-dong-wen-jian.md)
- [启动项服务后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/qi-dong-xiang-fu-wu-hou-men.md)
- [后门驱动程序](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/hou-men-qu-dong-cheng-xu.md)
- [IPTables端口复用](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/iptables-duan-kou-fu-yong.md)
- [web服务&中间件](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian.md)
- [Java](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian/java.md)
- [Nginx](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian/nginx.md)
- [Apache](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian/apache.md)
- [IIS](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian/iis.md)