_ ReconLab
Commands  / Post-Exploitation  / Impacket

Impacket

Python toolkit of Windows/AD attack scripts.

KaliParrothigh

pkg: impacket-scripts

Impacket provides psexec.py, secretsdump.py, ntlmrelayx.py, GetUserSPNs.py and more for AD attacks and lateral movement.

Syntax

{script}.py {options}

Example

secretsdump.py corp/admin:Pass@10.0.0.5

Dumps SAM/LSA/NTDS secrets from the host using valid creds.

Advantages
  • Core AD attack scripts
  • Relay, DCSync, Kerberoast & more
Disadvantages
  • AD knowledge required
  • Highly intrusive
Tags
#ad#windows#lateral

Official docs: Impacket ↗

Related commands

BloodHound

Map Active Directory attack paths.

CrackMapExec

Swiss-army knife for AD/SMB networks.

Evil-WinRM

WinRM shell for Windows post-exploitation.

Frequently asked questions

What is Impacket used for?
Impacket provides psexec.py, secretsdump.py, ntlmrelayx.py, GetUserSPNs.py and more for AD attacks and lateral movement.
What is an example Impacket command?
A common example is: secretsdump.py corp/admin:Pass@10.0.0.5 — Dumps SAM/LSA/NTDS secrets from the host using valid creds.
Is Impacket part of Kali Linux?
Yes. Impacket ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install impacket-scripts.
What category of security tool is Impacket?
Impacket is a Post-Exploitation tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →