# 权限维持

- [Windows](https://www.heresecurity.wiki/quan-xian-wei-chi/windows.md)
- [关闭防病毒软件](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/guan-bi-fang-bing-du-ruan-jian.md)
- [启动文件夹](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/qi-dong-wen-jian-jia.md)
- [DLL劫持计划任务](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dll-jie-chi-ji-hua-ren-wu.md)
- [DLL注入](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dll-zhu-ru.md)
- [DSRM+注册表ACL后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dsrm+-zhu-ce-biao-acl-hou-men.md)
- [Empire](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/empire.md)
- [Guest激活](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/guest-ji-huo.md)
- [HookPasswordChangeNotify](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/hookpasswordchangenotify.md)
- [Invoke ADSBackdoor](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/invoke-adsbackdoor.md)
- [Invoke Tasks后门&权限维持](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/invoke-tasks-hou-men-quan-xian-wei-chi.md)
- [Kerberoasting后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/kerberoasting-hou-men.md)
- [Metsvc](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/metsvc.md)
- [MOF](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/mof.md)
- [Shadow-Credentials](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/shadow-credentials.md)
- [ADS\&JavaScript](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ads-and-javascript.md)
- [ADS隐藏webshell](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ads-yin-cang-webshell.md)
- [Bitadmin](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/bitadmin.md)
- [CLR Injection](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/clr-injection.md)
- [COM OBJECT hijacking](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/com-object-hijacking.md)
- [DCShadow\&SIDHistory](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dcshadow-and-sidhistory.md)
- [DCSync后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dcsync-hou-men.md)
- [DLL代理劫持右键](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dll-dai-li-jie-chi-you-jian.md)
- [DLL劫持](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/dll-jie-chi.md)
- [Persistence](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/persistence.md)
- [RID劫持](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/rid-jie-chi.md)
- [rootkit](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/rootkit.md)
- [RPC后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/rpc-hou-men.md)
- [S4U2Self后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/s4u2self-hou-men.md)
- [Skeleton Key万能钥匙](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/skeleton-key-wan-neng-yao-shi.md)
- [Squibledoo](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/squibledoo.md)
- [Windows FAX DLL Injection](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/windows-fax-dll-injection.md)
- [WinRM端口复用](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/winrm-duan-kou-fu-yong.md)
- [WMIC事件订阅](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/wmic-shi-jian-ding-yue.md)
- [WMI Persistence](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/wmi-persistence.md)
- [创建服务](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/chuang-jian-fu-wu.md)
- [登录初始化](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/deng-lu-chu-shi-hua.md)
- [MSSQL后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/mssql-hou-men.md)
- [Netsh Helper DLL](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/netsh-helper-dll.md)
- [NPPSpy记录密码](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/nppspy-ji-lu-mi-ma.md)
- [NSSM](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/nssm.md)
- [Password Filter DLL](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/password-filter-dll.md)
- [添加签名](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/tian-jia-qian-ming.md)
- [通过控制面板加载项维持权限](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/tong-guo-kong-zhi-mian-ban-jia-zai-xiang-wei-chi-quan-xian.md)
- [通过自定义.net垃圾回收机制进行DLL注入](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/tong-guo-zi-ding-yi-.net-la-ji-hui-shou-ji-zhi-jin-xing-dll-zhu-ru.md)
- [唯一IP访问](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/wei-yi-ip-fang-wen.md)
- [影子用户](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ying-zi-yong-hu.md)
- [映像劫持](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ying-xiang-jie-chi.md)
- [注入SSP被动收集密码](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/zhu-ru-ssp-bei-dong-shou-ji-mi-ma.md)
- [基于域策略文件权限后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ji-yu-yu-ce-le-wen-jian-quan-xian-hou-men.md)
- [计划任务](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/ji-hua-ren-wu.md)
- [进程注入](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/jin-cheng-zhu-ru.md)
- [使用AMSI扫描接口维持权限](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/shi-yong-amsi-sao-miao-jie-kou-wei-chi-quan-xian.md)
- [受限委派后门](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/shou-xian-wei-pai-hou-men.md)
- [Linux](https://www.heresecurity.wiki/quan-xian-wei-chi/linux.md)
- [apt后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/apt-hou-men.md)
- [bash rc](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/bash-rc.md)
- [Kbeast\_rootkit](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/kbeast_rootkit.md)
- [Linux cron后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/linux-cron-hou-men.md)
- [OpenSSH后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/openssh-hou-men.md)
- [Reptile](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/reptile.md)
- [SSHD后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/sshd-hou-men.md)
- [SSH wrapper后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/ssh-wrapper-hou-men.md)
- [SSH公私钥登录](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/ssh-gong-si-yao-deng-lu.md)
- [Strace记录ssh密码](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/strace-ji-lu-ssh-mi-ma.md)
- [SUID Shell](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/suid-shell.md)
- [进程注入](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/jin-cheng-zhu-ru.md)
- [文件处理](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/wen-jian-chu-li.md)
- [用户启动文件](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/yong-hu-qi-dong-wen-jian.md)
- [启动项服务后门](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/qi-dong-xiang-fu-wu-hou-men.md)
- [后门驱动程序](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/hou-men-qu-dong-cheng-xu.md)
- [IPTables端口复用](https://www.heresecurity.wiki/quan-xian-wei-chi/linux/iptables-duan-kou-fu-yong.md)
- [web服务&中间件](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian.md)
- [Java](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian/java.md)
- [Nginx](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian/nginx.md)
- [Apache](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian/apache.md)
- [IIS](https://www.heresecurity.wiki/quan-xian-wei-chi/web-fu-wu-zhong-jian-jian/iis.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://www.heresecurity.wiki/quan-xian-wei-chi.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.