smbexec

Impacket's smbexec.py provides a semi-interactive command shell on a remote Windows host through the Service Control Manager over SMB/RPC. Each command creates and removes a temporary service and batch file. In SHARE mode, output is written to and read back from a selected writable target share; in SERVER mode, the operator starts an SMB listener on TCP/445 and the target copies output back to it. The script avoids RemComSvc but generates service, process, and SMB telemetry; long-running tasks may be terminated because the launched command is not a conventional Windows service.