> For the complete documentation index, see [llms.txt](https://docs.qwqdanchun.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.qwqdanchun.com/persistence.md).

# 权限维持

- [服务](https://docs.qwqdanchun.com/persistence/service.md)
- [新建服务](https://docs.qwqdanchun.com/persistence/service/new-service.md)
- [修改服务](https://docs.qwqdanchun.com/persistence/service/edit-service.md)
- [隐藏服务](https://docs.qwqdanchun.com/persistence/service/hide-service.md)
- [劫持服务](https://docs.qwqdanchun.com/persistence/service/hijack-service.md)
- [启动项](https://docs.qwqdanchun.com/persistence/startup.md)
- [注册表](https://docs.qwqdanchun.com/persistence/startup/registry.md)
- [文件夹](https://docs.qwqdanchun.com/persistence/startup/folder.md)
- [用户账户](https://docs.qwqdanchun.com/persistence/user.md)
- [新建用户](https://docs.qwqdanchun.com/persistence/user/add-user.md)
- [隐藏用户](https://docs.qwqdanchun.com/persistence/user/hide-user.md)
- [DLL劫持](https://docs.qwqdanchun.com/persistence/dll-hijack.md)
- [劫持自启动程序](https://docs.qwqdanchun.com/persistence/dll-hijack/hijack-autorun-programs.md)
- [劫持.NET程序](https://docs.qwqdanchun.com/persistence/dll-hijack/hijack-.net-program.md)
- [NTFS短文件名](https://docs.qwqdanchun.com/persistence/dll-hijack/ntfs-duan-wen-jian-ming.md)
- [COM劫持](https://docs.qwqdanchun.com/persistence/com-hijack.md)
- [COM劫持](https://docs.qwqdanchun.com/persistence/com-hijack/com-hijack.md)
- [映像劫持](https://docs.qwqdanchun.com/persistence/image-file-execution-options.md)
- [映像劫持](https://docs.qwqdanchun.com/persistence/image-file-execution-options/image-file-execution-options.md)
- [计划任务](https://docs.qwqdanchun.com/persistence/schtasks.md)
- [新建任务](https://docs.qwqdanchun.com/persistence/schtasks/add-schtasks.md)
- [WMI](https://docs.qwqdanchun.com/persistence/wmi.md)
- [WMI事件](https://docs.qwqdanchun.com/persistence/wmi/wmi-event.md)
- [Office](https://docs.qwqdanchun.com/persistence/office.md)
- [VSTO](https://docs.qwqdanchun.com/persistence/office/vsto.md)
- [WLL/XLL](https://docs.qwqdanchun.com/persistence/office/wll-xll.md)
- [模板文件](https://docs.qwqdanchun.com/persistence/office/macro-enabled-add-in-file.md)
- [COM劫持](https://docs.qwqdanchun.com/persistence/office/com-hijack.md)
- [BITS Jobs](https://docs.qwqdanchun.com/persistence/bits-jobs.md)
- [BITS](https://docs.qwqdanchun.com/persistence/bits-jobs/bits.md)
- [Rootkit](https://docs.qwqdanchun.com/persistence/rootkit.md)
- [Rootkit](https://docs.qwqdanchun.com/persistence/rootkit/rootkit.md)
- [未分类](https://docs.qwqdanchun.com/persistence/uncatelogued.md)
- [Windows Telemetry](https://docs.qwqdanchun.com/persistence/uncatelogued/windows-telemetry.md)
- [替换文件](https://docs.qwqdanchun.com/persistence/uncatelogued/replace-file.md)
- [AppInit\_DLLs注入](https://docs.qwqdanchun.com/persistence/uncatelogued/appinit-dlls-inject.md)
- [粘滞键](https://docs.qwqdanchun.com/persistence/uncatelogued/sethc.exe.md)
- [cmd启动劫持](https://docs.qwqdanchun.com/persistence/uncatelogued/command-processor.md)
- [屏幕保护](https://docs.qwqdanchun.com/persistence/uncatelogued/screen-save.md)
- [注册SSP DLL](https://docs.qwqdanchun.com/persistence/uncatelogued/ssp-dll.md)
- [AddMonitor](https://docs.qwqdanchun.com/persistence/uncatelogued/addmonitor.md)
- [滥用POWERSHELL配置文件](https://docs.qwqdanchun.com/persistence/uncatelogued/powershell-profile.md)
- [W32Time](https://docs.qwqdanchun.com/persistence/uncatelogued/w32time.md)
- [UWP](https://docs.qwqdanchun.com/persistence/uncatelogued/uwp.md)
- [Waitfor](https://docs.qwqdanchun.com/persistence/uncatelogued/waitfor.md)
- [Bios](https://docs.qwqdanchun.com/persistence/uncatelogued/bios.md)
- [劫持更新程序](https://docs.qwqdanchun.com/persistence/uncatelogued/hijack-update-program.md)
- [利用LAPS](https://docs.qwqdanchun.com/persistence/uncatelogued/laps.md)
- [SDB文件](https://docs.qwqdanchun.com/persistence/uncatelogued/sdb.md)
- [lsasrv.dll](https://docs.qwqdanchun.com/persistence/uncatelogued/lsasrv.dll.md)
- [LangBarAddin](https://docs.qwqdanchun.com/persistence/uncatelogued/langbaraddin.md)
- [GPO](https://docs.qwqdanchun.com/persistence/uncatelogued/gpo.md)
- [SPReview.exe](https://docs.qwqdanchun.com/persistence/uncatelogued/spreview.exe.md)