Windows Server 2025 Payload-Based Intrusion & Post-Exploitation Assessment
Kali Linux → Windows Server 2025 · Isolated Virtual Lab
Independently planned and executed a complete penetration testing engagement against a Windows Server 2025 target within an isolated lab environment, delivering a custom reverse-TCP payload, capturing an Administrator session, and conducting post-exploitation host enumeration.
Engagement Milestones & Activities:
Custom Windows reverse-TCP payload generated using msfvenom • Payload delivery and live callback capture via Metasploit multi/handler • Immediate Administrator-level shell access on first execution (no priv-esc needed) • Post-exploitation enumeration: token privileges (whoami /priv) & host fingerprinting • Local account discovery, services mapping, and network connection auditing • Professional VAPT report compilation with severity-rated findings & hardening roadmap
Kali Linux • Windows Server 2025 • msfvenom • Metasploit Framework • multi/handler • Meterpreter • PowerShell • VAPT Reporting