Samples
MmcExec
Executes a lateral movement technique using MMC over DCOM
- RPC
- NTLM
- DCOM
- OLE Automation
- Dynamic IDispatch
ShellDcomExec
Executes a lateral movement technique using the shell over DCOM.
- RPC
- NTLM
- DCOM
- OLE Automation
- Dynamic IDispatch
WordMacroExec
Adds a macro to a Word document over DCOM.
- RPC
- NTLM
- DCOM
- OLE Automation
- Dynamic IDispatch
EnumUsers
Enumerates user accounts.
- NTLM
- RPC
- Using SAM service to enumerate users
WeakService
Enumerates services, checking whether the DACL contains interesting entries.
- NTLM
- RPC
- SMB
- Using LSA to translate SIDs to account names
- Enumerating services
- Analyzing security descriptors
Smb2GetSample
Gets a file over SMB2.
- SMB
WmiExec
Executes a process using Win32_Process.Create
- RPC
- DCOM
- WMI
- Dynamic dispatch
WmiRegistry
Uses WMI to access the registry.
- RPC
- DCOM
- WMI
- Dynamic dispatch