Remoxec

Remoxec executes a program using RPC (Task Scheduler) or DCOM (Windows Management Instrumentation).

Administrators with Null or weak passwords may be exploited through Task Scheduler (1025/tcp or above) or DCOM (default 135/tcp). You have to give heed also to RPC/DCOM and not only to SMB.

CA-2003-08: Increased Activity Targeting Windows Shares

Remoxec works only on Pentium compatible computers. It has been proven to work on Windows 2000/XP.

Remoxec is free for a non-commercial or commercial use.

(Mar. 2003)

Presentation:

Black Hat Windows 2004  -  Presentation (pdf)