Regarding the recently disclosed vulnerability, a neat tool for remotely determining installed services or if the vulnerable psexec service exists(if not cleaned up properly). It checks if certain named pipes exist which doesn’t require administrative privileges. You still need some form of basic authentication / trust / credentials (even unprivileged) like a valid domain user account. github.com/tothi/serviceDetect

#Impacket #psexec

Last updated 2 years ago

benzogaga33 · @benzogaga33
545 followers · 17844 posts · Server mamot.fr
benzogaga33 · @benzogaga33
545 followers · 17844 posts · Server mamot.fr