横向移动-PsExec轻量级 telnet 替代品
2023-5-30 09:58:17 Author: Ots安全(查看原文) 阅读量:29 收藏

PsExec 是 Sysinternals 工具套件的一部分,它是一组用于管理和排除 Windows 系统故障的实用程序。

它非常适合在目标机器上远程执行命令。

注意:一些 AV 将 PsExec 检测为“远程管理员”病毒。

安装:(PowerShell)

Invoke-WebRequest -Uri 'https://download.sysinternals.com/files/PSTools.zip' -OutFile 'pstools.zip'Expand-Archive -Path 'pstools.zip' -DestinationPath "$env:TEMP\pstools"Move-Item -Path "$env:TEMP\pstools\psexec.exe" .Remove-Item -Path "$env:TEMP\pstools" -Recurse

用法:

# Prevent the license agreement from being displayedpsexec.exe /accepteula
# Run the 'hostname' command on remote machinepsexec.exe \\REMOTECOMPUTER hostname
# Run the 'hostname' command on EVERYTHING (on the domain)psexec.exe \\* hostname
# Run a local executable on a remote machinepsexec.exe \\REMOTECOMPUTER -c C:\Tools\program.exe
# Run the 'hostname' command with different credentialspsexec.exe \\REMOTECOMPUTER hostname -u localadmin -p [email protected]$$word
# Spawn shell on remote machinepsexec.exe -s \\REMOTECOMPUTER cmd

下载地址:https://learn.microsoft.com/en-us/sysinternals/downloads/psexec

相关学习:https://adamtheautomator.com/psexec/

感谢您抽出

.

.

来阅读本文

点它,分享点赞在看都在这里


文章来源: http://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247498219&idx=1&sn=6bde60885cd76f020a3856511f7d7366&chksm=9badb0a0acda39b6b35ee203705da97ae966156400c9d46d996844eb531264a7a47b136b15d6#rd
如有侵权请联系:admin#unsafe.sh