Impacket-dcomexec

ExecutionLinuxWindowsActiveDirectory

Impacket's dcomexec.py provides an interactive shell on the Windows host similar to wmiexec.py, but using varying DCOM endpoints. Currently supports MMC20.Application, ShellWindows, and ShellBrowserWindow DCOM objects. Command Reference: Target IP: 10.10.10.1 Domain: test.local Username: john Password: password123 DCOM Object: MMC20

python3 dcomexec.py -object MMC20 test.local/john:password123@10.10.10.1

Evidence: Upstream reference
Environment: Active Directory
Native: Exploitation
Requires: Password, Username
Services: DCOM
Refs: github.com/SecureAuthCorp/impacket/blob/master/examples/dcomexec.py
riccardoancarani.github.io/2020-05-10-hunting-for-impacket/