{"id":13845751,"url":"https://github.com/b0bac/PyNoPSExec","last_synced_at":"2025-07-12T03:32:07.494Z","repository":{"id":43575025,"uuid":"365424290","full_name":"b0bac/PyNoPSExec","owner":"b0bac","description":"修改自SharpNoPSExec的基于python的横移工具 A Lateral Movement Tool Learned From SharpNoPSExec  --  Twitter: @juliourena","archived":false,"fork":false,"pushed_at":"2021-05-08T08:50:11.000Z","size":5595,"stargazers_count":32,"open_issues_count":0,"forks_count":8,"subscribers_count":1,"default_branch":"main","last_synced_at":"2024-08-05T17:45:08.338Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/b0bac.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-05-08T05:10:20.000Z","updated_at":"2023-12-13T11:38:21.000Z","dependencies_parsed_at":"2022-09-13T04:01:58.119Z","dependency_job_id":null,"html_url":"https://github.com/b0bac/PyNoPSExec","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/b0bac%2FPyNoPSExec","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/b0bac%2FPyNoPSExec/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/b0bac%2FPyNoPSExec/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/b0bac%2FPyNoPSExec/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/b0bac","download_url":"https://codeload.github.com/b0bac/PyNoPSExec/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225791394,"owners_count":17524774,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:03:35.079Z","updated_at":"2024-11-21T19:30:39.203Z","avatar_url":"https://github.com/b0bac.png","language":"Python","readme":"# PyNoPSExec\n**A Lateral Movement Tool Learned From SharpNoPSExec  --  Twitter: @juliourena  根据@juliourena大神的SharpNOPsExec项目改写的横向移动工具** \n+ Platform(平台): Windows 10\n+ Language(语言): Python2\n## 原理简介  \n**通过修改服务启动的二进制文件路径，然后启动服务来执行，对服务的要求是：**\n+ 没有运行的手动启动或禁止启动的服务\n+ 服务没有依赖项\n+ 该脚本没有提供服务二进制文件路径恢复功能，需要先记好对应路径，然后可以再次运行该脚本进行恢复，避免服务出问题\n+ 关于查询服务可以使用impacket examples中的services.py 或者对应的exe程序 \n```bash\n.\\services.exe sec/testuser:TestPassword@123@192.168.23.107 config -name AppMgmt\n```\n![image](https://user-images.githubusercontent.com/11972644/117533063-371b2c80-b01d-11eb-918b-b36c820e6d7c.png)\n\n## 使用方法  \n\n\n```bash\nnet use \\\\192.168.23.107\\admin$ \"TestPassword@123\" /user:testuser\npython PyNoPSexec.py  -t 192.168.23.107 -u testuser -p \"TestPassword@123\" -d test.sec.com -s AppMgmt -e \"c:\\\\windows\\\\system32\\\\cmd.exe /c echo hackedbybobac \u003e c:\\\\bobac.txt\"\n```\n![image](https://user-images.githubusercontent.com/11972644/117527553-82264700-afff-11eb-9850-45ecbd997f98.png)\n![image](https://user-images.githubusercontent.com/11972644/117527633-0bd61480-b000-11eb-955e-d8310d463090.png)\n\n\n","funding_links":[],"categories":["Python"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fb0bac%2FPyNoPSExec","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fb0bac%2FPyNoPSExec","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fb0bac%2FPyNoPSExec/lists"}