Windows Manage Run Command As User
This module will login with the specified username/password and execute the supplied command as a hidden process. Output is not returned by default, by setting CMDOUT to false output will be redirected to a temp file and read back in to display.By setting advanced option SETPASS to true, it will reset the users password and then execute the command.
Rank
- Normal
Authors
- Kx499 < >
Development
Similar Modules
- post/windows/manage/add_user_domain
- post/windows/manage/autoroute
- post/windows/manage/delete_user
- post/windows/manage/download_exec
- post/windows/manage/enable_rdp
- post/windows/manage/inject_ca
- post/windows/manage/inject_host
- post/windows/manage/migrate
- post/windows/manage/multi_meterpreter_inject
- post/windows/manage/nbd_server
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use post/windows/manage/run_as
msf post(run_as) > set CMD [STRING]
msf post(run_as) > set PASS [STRING]
msf post(run_as) > set SESSION [INTEGER]
msf post(run_as) > set USER [STRING]
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use post/windows/manage/run_as
msf post(run_as) > set CMD [STRING]
msf post(run_as) > set PASS [STRING]
msf post(run_as) > set SESSION [INTEGER]
msf post(run_as) > set USER [STRING]
Module Options
| CMD | Command to execute |
| CMDOUT | Retrieve command output |
| PASS | Password to use |
| SESSION | The session to run this module on. |
| USER | Username to reset/login with |
| SETPASS | Reset password |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |