Impacket’s atexec.py uses the Task Scheduler service on the remote Windows host to execute the given command. It will create a windows task with a random name, trigger the task, and then delete it. The following command executes
whoami on the remote Windows host.
Target IP: 10.10.10.1 Domain: test.local Username: john Password: password123 Command Executed: whoami
python3 atexec.py test.local/john:email@example.com whoami