The-Viper-One / PsMapExec

A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec
https://viperone.gitbook.io/pentest-everything/psmapexec
BSD 2-Clause "Simplified" License
785 stars 92 forks source link

Users/Password List ? #7

Open 0xGreen opened 4 months ago

0xGreen commented 4 months ago

Great Tool!

Is there any way to provide a list of users and passwords? like what is available for Targets -Target "C:\Targets.txt"

PsMapExec -Targets all -Username c:\users.txt -Password c:\passwords.txt -Method wmi -Command "hostname"

Scenario: If i have 3 valid username/passwords. with -username and -password i have to run the above command 9 times. If the script accept user/pass list then single command will check wmi access for all credentials sets.

Thanks!

The-Viper-One commented 4 months ago

Thanks for the feedback.

This is something I would like to add and should be quite reasonable to implement. However, there is an underlying issue where if you run PsMapExec as one user then immediately run it again using the same protocol as a different user it sometimes pollutes the permissions on the second run with the account used in the first run. I think the issue is a limitation in Windows rather than the tool (I might be wrong) so its been quite difficult to pinpoint a solution.

I will keep this issue open for the time being, hopefully if the polluting issue can be resolved I can then add this recommendation.