7 Minute Security Wiki v1.0

runas.exe

By

Helpful for running something on a Windows machine in another user's context.

Spawn a cmd.exe as a domain user

runas /netonly /user:7MS\pwneduser "C:\windows\system32\cmd.exe"

Troubleshooting

I found that AD passwords ending with % sometimes have issues doing the runas magic. In cases like that, check out runascs.

See also

So one time I found my runas command wasn't working and I couldn't authenticate to the domain. I found some articles indicating that AD passwords ending with % might have problems when using them from domain-joined machines.

snaffler absolutely rules and finding good SMB share treasures!

Last updated on 2026-04-28