~/bokkapig
hack the box machine writeups

Impacket DCOMExec

PasswordUsernameLinuxWindowsExploitation

Impacket’s dcomexec.py provides an interactive shell on the Windows host similar to wmiexec.py, but using varying DCOM endpoints.

Currently supports MMC20.Application, ShellWindows, and ShellBrowserWindow DCOM objects.

Command Reference:

Target IP: 10.10.10.1

Domain: test.local

Username: john

Password: password123

DCOM Object: MMC20

Command

python3 dcomexec.py -object MMC20 test.local/john:password123@10.10.10.1

References