Current user psexec #656

merged 3 commits into from Aug 1, 2012


None yet

3 participants

jlee-r7 commented Aug 1, 2012

I demo'd this module at DefCon. Essentially, it uses the session's current token to attempt to create a service on remote machines, using a UNC path pointing to the session host as the executable to avoid having to upload directly to each target.

egypt added some commits Aug 1, 2012
@egypt egypt Add a comment describing function prototype 46312d9
@egypt egypt Add current_user_psexec module
Tested against a 2k8 domain controller.
@egypt egypt Remove superfluous method
Obsoleted by session.session_host, which does the same thing
@wchen-r7 wchen-r7 merged commit 0707730 into rapid7:master Aug 1, 2012
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment