Remote Shells Commands

11 Remote Shells commands from the Lateral Movement category, each with its placeholders, supported authentication methods and upstream references.

Tools covered: evil-winrm, impacket-atexec, impacket-dcomexec, impacket-psexec, impacket-smbexec, impacket-wmiexec, nxc

• Evil-WinRM Shell Windows Remote Management shell connection
• Impacket AtExec Execute commands via Windows Task Scheduler service
• Impacket atexec.py (Scheduled Task) One-shot command execution by creating, running, and deleting a scheduled task over MS-TSCH. Output is…
• Impacket DCOMExec Execute commands via DCOM (Distributed Component Object Model)
• Impacket dcomexec.py Execute commands over DCOM (MMC20.Application / ShellWindows / ShellBrowserWindow) without dropping a…
• Impacket PSExec Execute commands via PSExec service
• Impacket SMBExec Execute commands via SMB service creation
• Impacket WMIExec Execute commands via WMI (Windows Management Instrumentation)
• NetExec SMB Command Exec Execute commands on a remote Windows host via SMB using NetExec
• NetExec WinRM Command Execution Execute a command on a Windows host over WinRM (PowerShell Remoting). Use -X for PowerShell scriptblocks.
• NetExec WMI Command Execution Execute a command on a Windows host over WMI. WMI exec is often allowed in environments where SMB / WinRM is…