.. / AD - Impacket - atexec (Creds)

Impacket’s atexec.py uses the Task Scheduler service on the remote Windows host to execute the given command. It will create a windows task with a random name, trigger the task, and then delete it. The following command executes whoami on the remote Windows host.

Command Reference:

Target IP: 10.10.10.1

Domain: test.local

Username: test

Password: Welkom01!

Command Executed: whoami
Command: Copy References:

https://github.com/SecureAuthCorp/impacket/blob/master/examples/atexec.py

https://u0041.co/blog/post/1