Fileless persistence via scheduled tasks and WMI - Run scripts directly from memory via PowerShell.
Dependency confusion / package hijacking - Publish higher-priority package names to public registries to capture builds. hacktricks 179 best
Identifying the router OS (Cisco, Juniper, etc.) to look for known CVEs or default configurations. 3. Common Vulnerabilities to Check Fileless persistence via scheduled tasks and WMI -
DNS tunneling for data exfiltration