Files
atomic-red-team/Windows/Lateral Movement/Windows Admin Shares.md
T
caseysmithrc ac8dd2cfec Initial Commit
Initial Checkin
2017-10-11 10:35:17 -07:00

383 B

Windows Admin Shares

MITRE ATT&CK Technique: T1077

Input:

cmd.exe /c "net use \\<computer_name>\ipc$ P@ssw0rd1 /u:<domain>\Administrator"

Input:

cmd.exe /c "net use \\<computer_name>\admin$ P@ssw0rd1 /u:<domain>\Administrator"

Input:

cmd.exe /c "net use \\<computer_name>\c$ P@ssw0rd1 /u:<domain>\Administrator"