Insecure remote administration

Use valid credentials to access a reachable remote administration service and execute a command on the host. This record covers SMB administrative-service execution with Impacket and interactive WinRM/PowerShell remoting; it does not describe protocol vulnerabilities or the separate RDP, VNC, SSH, or DCOM procedures. The service must be reachable from the operator's network and the account must have the required remote rights. An Internet-reachable variant exists only where an organization exposes the relevant service and permits that access.