the_open_door
coffee
ESEN
← Tools

psexec.py

Remote SYSTEM execution over SMB (impacket).

An Impacket tool that runs commands as SYSTEM on a Windows host by creating a service over SMB. It accepts a password or a hash (Pass-the-Hash). It is noisy (leaves a service trace); wmiexec or smbexec are stealthier alternatives.

Family Access, shells & transfer

Flags -hashes

Concepts Pass-the-Hash

Cheatsheet Post-exploitation & lateral

Installation

# All of Impacket's *.py tools ship in the same package:
pipx install impacket
# invoke them as impacket-<tool> or <Tool>.py depending on the packaging

Useful commands3 commands

Appears in

Some machines where its use is documented; not an exhaustive list.