TLDR Tech / InfoSec
Impacket for Pentester: atexec
This walkthrough walks through Impacket's atexec module across the full Windows Task Scheduler (ATSVC/TSCH) abuse chain over SMB, demonstrating plaintext, Pass-the-Hash, Pass-the-Ticket, and Pass-the-Key execution against a Server 2019 DC before weaponizing a Base64 PowerShell payload with -silentcommand into a full interactive reverse shell. It's a solid operational reference rather than new tooling, no repo to evaluate, though the closing detection notes add real blue-team value.
Read the full story