Remote Command Execution

Hi all,
i have a username and pasword of system(Win2000,WinXp) and i m trying to execute the command. Howz that possible

Waiting for reply

Thanks

Well, you need to access a shell or use a remote exploit.
To access your shell, the remote machine needs to be running a daemon such as ssh or telnet which you can access and log into to send the command.

This means it is impossible to run any command on remote machine if u have both Administrator username and password. i donot want to run exploits on it . Any other solution would be better.

Thanks

On a XP box go to Start>Control Panel>Network and Internet Connections>Remote Desktop
It says learn more about remote desktop.
But the computer you are trying to connect to has to have it turned on.

Download sysinternal's pstools. It contains psexec. This will let you execute commands remotely (but you'll need administrator privileges on the remote machine). Best thing is it's free and nothing needs to be installed on the remote machine.

Example:

Code:

---

psexec \\remotemachine cmd

---

This will open a remote command shell. Be carefull though! Some commands don't like the way the input/output got redirected and will choke. A good example is the commandline ftp client.

Hi,
i have tried pstools but when i try to execute command remotely their is access denied error but i can login with the same account name and password physically on that system. What be the problem and its possible soultion(I also used dameware but the same type of problems there). The command i used was

psexec \\computername cmd -u username -p password

Thanks

It should be
psexec \\remotemachine -u username -p password cmd

Everything after cmd gets interpreted as arguments for cmd.

psexec \\10.10.1.49 -u Administrator -p A "dir"
psexec \\10.10.1.49 -u Administrator -p A "ipconfig.exe"

The out put was

PsExec v1.54 - Execute processes remotely
Copyright (C) 2001-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

Couldn't access 10.10.1.49:
The network path was not found.

Make sure that the default admin$ share is enabled on 10.10.1.49.

What the problem could be???????????

You either have the wrong IP address or admin$ has been disabled.


Here is the article that describes administrative shares.

http://support.microsoft.com/default...b;en-us;314984