/psexec_noinstall

Repository contains psexec, which will help to exploit the forgotten pipe

Primary LanguagePython

psexec_noinstall

The repository contains psexec, which will help to exploit the forgotten pipe

Have a non-genius administrator connect using PsExec to the host: изображение

We discovered this when we saw the RemCom_Communication bundle. This one is standard for PsExec изображение

Using psexec_noinstall, it is possible to connect to this pipeline as any low-privileged user, since the DACL of the pipeline allows this: изображение изображение