Creds login

SMB TCP/445

psexec.py htb.local/blas:password@$ip
nxc smb $ip -u blas -p password -d htb.local -x cmd
smbclient.py htb.local/blas:password@$ip

WINRM TCP/5985

evil-winrm -i $ip -u blas -p password
nxc winrm $ip -u blas -p password -d htb.local -x cmd

RDP TCP/3389

xfreerdp /u:blas /d:htb.local /p:password /v:$ip

MSSQL TCP/3306

nxc mssql $ip -u blas -p password

Last updated