Can you use PsExec on Linux?

Can you use PsExec on Linux?

Thanks to an updated winexe hosted at http://sourceforge.net/p/winexe/wiki/Home/ psexec in linux is possible.

What is PsExec used for?

PsExec is a light-weight telnet-replacement that lets you execute processes on other systems, complete with full interactivity for console applications, without having to manually install client software.

Is PsExec malicious?

Sysinternals PsExec is a legitimate systems administration utility, and may be used as such day-to-day in an environment. Some legitimate monitoring solutions, vulnerability scanners, or asset management systems might also exhibit this activity pattern.

Is PsExec safe to use?

It is clearly not safe to use PsExec’s “-u” option on an untrusted remote host. On the other hand, using PsExec without “-u” and therefore authenticating as the currently logged-on user is much safer and does not expose the account to theft of password hashes, the Kerberos TGT, or the plain-text password itself.

How do I run a Psexec as administrator?

When you run cmd.exe interactively through PsExec under a remote user, you have no way to elevate privileges (as Admin) when the UAC is enabled. To run the commands with the account’s elevated token, use the –h option. This option means that all commands will be executed in the “Run as Administrator” mode.

What is Winexe?

Winexe is a GNU/Linux-based application that allows users to execute commands remotely on WindowsNT/2000/XP/2003/Vista/7/8 systems. It installs a service on the remote system, executes the command, and uninstalls the service. Winexe allows execution of most of the windows shell commands.

What protocol does PsExec use?

SMB
PsExec allows for remote command execution (and receipt of resulting output) over a named pipe with the Server Message Block (SMB) protocol, which runs on TCP port 445.

How use PsExec remote command?

PsExec allows you to run the command simultaneously on multiple remote computers. To do this, you can set the computer names separated by commas: psexec PC1,PC2 “ipconfig /all” or save them in a text file, and then specify a path to this file: psexec @c:\ps\computer_list. txt ipconfig.

Is PsExec a vulnerability?

PsExec has been vulnerable to a local privilege escalation for the last 14 years, according to security researcher David Wells. The vulnerability lies within the PSEXESVC service which is executed as SYSTEM on the machine.

Does PsExec use RPC?

Yes. Psexec issues a remote procedure call to start up the specified process on the foreign machine with the credentials provided. Although traditionally 445 is used for SMB and 135 is used for DCOM, both can be used by RPC depending on the specifics of the protocol and the objects that are being remotely used.

Does PsExec need to be installed on remote machine?

Installing PSexec (With Remote Computer Setup) Technically, you don’t install PsExec since it’s just a command-line utility but close enough. Since no installation is necessary, you simply need to download and extract it from the PsTools zip file.

How do I make myself a network administrator?

Here are the steps to follow:

1. Go to Start > type ‘control panel’ > double click on the first result to launch the Control Panel.
2. Go to User Accounts > select Change account type.
3. Select the user account to change > Go to Change the account type.
4. Select Administrator > confirm your choice to complete the task.