Winexe

S0191

Tool.View on attack.mitre.org

About this tool

Winexe is a lightweight, open source tool similar to PsExec designed to allow system administrators to execute commands on remote servers. Winexe is unique in that it is a GNU/Linux based client.

Techniques used1

Procedure examples1

TechniqueProcedure example
T1569.002
Service Execution

Winexe installs a service on the remote system, executes the command, then uninstalls the service.

Groups that use it3

Campaigns0

None recorded.

References2

  1. Winexe Github Sept 2013 Open source
    Skalkotos, N. (2013, September 20). WinExe. Retrieved January 22, 2018.
  2. Überwachung APT28 Forfiles June 2015 Open source
    Guarnieri, C. (2015, June 19). Digital Attack on German Parliament: Investigative Report on the Hack of the Left Party Infrastructure in Bundestag. Retrieved January 22, 2018.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.