Lateral Movement with Scheduled Tasks and PowerShell Cradle Commandline

Description

This script leverages schtasks.exe, username, and password to remotely execute a Specter PowerShell cradle.

Overview

This script leverages schtasks.exe to run a scheduled task on the operator specified system using username and password. A PowerShell cradle is executed as either the specified user or NT AUTHORITY\SYSTEM. The $Hostname parameter can be either hostname, FQDN, or IP.

Dependencies

  • None

Operating Systems

  • Windows

Pre-Requisites

  • Valid administrator credentials for the target systems.
  • Scheduled Task service running on the target.

Example Output

SUCCESS: The scheduled task "CacheTask" has successfully been created.
SUCCESS: Attempted to run the scheduled task "CacheTask".
SUCCESS: The scheduled task "CacheTask" was successfully deleted.
Scroll to Top