> For the complete documentation index, see [llms.txt](https://security.navidnaf.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://security.navidnaf.com/death-eaters/post-exploitation/windows.md).

# Windows

## Common Metasploit Modules

{% code overflow="wrap" %}

```bash
use post/windows/gather/win_privs
# Enumerates the current user's privileges on a Windows system.

use post/windows/gather/enum_logged_on_users
# Lists all users currently logged into the compromised Windows machine.

use post/windows/gather/checkvm
# Detects whether the target system is running inside a virtual machine.

use post/windows/gather/enum_applications
# Retrieves a list of installed applications on the target Windows machine.

use post/windows/gather/enum_computers
# Enumerates computers in the compromised system’s domain or network.

use post/windows/gather/enum_shares
# Lists shared folders and resources available on the target machine.
```

{% endcode %}