# [Impacket](https://github.com/SecureAuthCorp/impacket.git) ![[Tactics Write-Up#^9u8es4]] Impacket is already installed on Kali. Example scripts can be found in `/usr/share/doc/python3-impacket/examples/` ## `psexec.py` ![[Tactics Write-Up#^xvb2ro]] psexec uses [[SMB]] with access to `ADMIN share to get a reverse shell. ```sh python3 psexec.py <user account>@<ip address> ``` ## `mssqlclient.py` `mssqlclient.py` is a [[Microsoft SQL Server]] client. `-windows-auth` can be used to configure the script to use Windows authentication: ```sh python3 mssqlclient.py -windows-auth <workgroup>/<user name>@<IP address> ``` `help` will display the help page. `enable_xp_cmdshell` will enable `xp_cmdshell` allowing arbitrary command execution. ## Hack The Box Machines - [[Tactics Write-Up|Tactics]] - [[Archetype Write-up|Archetype]]