Create /netonly Process (Invoke-RubeusCreatenetonly)

Description

Creates a new process with /netonly credentials or an injected Kerberos ticket.

Overview

Creates a new process with alternate network credentials (equivalent to runas /netonly). The process runs as the current user locally but uses the specified credentials for network authentication. Optionally injects a Kerberos ticket into the new process.

Arguments

Parameter Type Description
Program string The program to execute (e.g., cmd.exe).
UserName string The username for network credentials.
Password string The password for network credentials.
Domain string The domain for network credentials.
Ticket string A base64-encoded ticket to inject into the new process.
Show switch Show the new process window.

Dependencies

  • AD

Operating Systems

  • Windows
Scroll to Top