Modify

Commands

net start <service>

Start Service

net pause

Pause service

net continue

Continue service

net stop <service>

Stop Service

sc create <ServiceName> binPath= "<PathToExecutable>"

Creates a new service.

sc delete <ServiceName>

Deletes a service.

sc start <service>

Start Service

sc pause <ServiceName>

Pauses a service.

sc continue <ServiceName>

Resumes a paused service.

sc stop <service>

Stop Service

sc config [ServiceName] [Options]

Configure Service

sc config <ServiceName> start= <startType>

Changes the startup type of a service.

sc config wzcsvc start=demand

Sets Wireless Service to Manual

sc config WZCSVC start=disable

Sets Wireless Service to Disabled

sc config netlogon start=disabled

Config netlogon

New-Service -Name <ServiceName> -BinaryPathName "<PathToExecutable>"

Creates a new service.

Remove-Service -Name <ServiceName>

Deletes a service (PowerShell 6+).

Set-Service -Name <ServiceName> -StartupType <StartType>

Changes the startup type of a service.

Start-Service -Name <ServiceName>

Starts a service.

Stop-Service -Name <ServiceName>

Stops a service.

Suspend-Service -Name <ServiceName>

Suspends a service.

Resume-Service -Name <ServiceName>

Resumes a suspended service.

Get-Service -Name <ServiceName>

Retrieves the current status of a specific service.

wmic service where name="<ServiceName>" call change startmode="<StartMode>"

Changes the startup type of a service.

wmic service where name="<ServiceName>" call startservice

Starts a service.

wmic service where name="<ServiceName>" call stopservice

Stops a service.

Sets the binary that executes when the service runs:

sc config <serviceName> binpath="\\"C:\\PrivEsc\\reverse.exe\\""

Service Name vs Display (key) Name

  • SERVICE_NAME = Winmgmt

  • DISPLAY_NAME = Windows Management Instrumentation <--also called keyname

Last updated

Was this helpful?