Execute remote SYSTEM-level commands on Windows hosts via SMB using Impacket.
npx skills add https://github.com/AeonDave/malskill --skill psexec
Please help me install this Agent Skill. Skill: psexec Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/windows/psexec Command: npx skills add https://github.com/AeonDave/malskill --skill psexec
This Skill provides a way to gain remote SYSTEM-level shell access on Windows hosts, particularly useful for administrative tasks and security assessments when direct access is not available or when needing to execute commands with elevated privileges.
Use the psexec skill to get a SYSTEM shell on the target IP 192.168.1.10 using the administrator's password.
High-intent search queries and answers about installing and using this skill.
To get a remote SYSTEM shell via SMB, you use the Impacket suite to create a service on the target Windows machine and execute a binary over the network. This grants elevated shell access for remote administration.
Yes, you can authenticate using an NTLM hash instead of a plaintext password. This pass-the-hash technique allows remote command execution on Windows hosts without requiring the actual administrator password.
Pass-the-hash remote execution is a technique that uses NTLM hashes for authentication instead of plaintext passwords. It is needed for security assessments or administrative tasks when you only have the hash of an administrator account.
Yes, Impacket psexec supports running diagnostic commands with elevated privileges. It leverages remote service creation over SMB to execute scripts and commands at the SYSTEM level on Windows servers.
The best way to execute remote commands when direct access is unavailable is using Impacket psexec over SMB. It bypasses standard access restrictions by creating a remote service to launch a SYSTEM-level shell.
Obtaining a SYSTEM shell through remote service creation requires SMB access and valid administrative credentials or NTLM hashes. It is limited by network firewall rules blocking SMB ports and requires elevated account privileges on the target Windows host.
AeonDaveRecovers Windows passwords by sniffing network traffic and cracking hash types.
jcastillotxEnumerate Linux systems for privilege escalation paths to root.
kevinpbuckleyAutomate Unreal asset discovery and management using Python APIs.
AeonDaveAutomate Active Directory credential spraying, enumeration, and remote command execution over SMB and WinRM.
