> For the complete documentation index, see [llms.txt](https://pentest.mxhx.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentest.mxhx.org/06-linux-privesc/remote-execute.md).

# Remote Execute

## Remote execute tricks from Linux to Windows:

1. **rdesktop**
   1. REF: [Windows:RdpTrick](/07-win-privesc/windows-cmd-kungfu.md#rdp-trick)
2. **psexec**
   1. REF: [PrivEscWin:psexec](/07-win-privesc/win-privesc.md#psexec)
3. **winexe**
   1. [PrivEscWin:Passwords:Registry](/07-win-privesc/win-privesc.md#passwords-registry)
   2. [Pivots-WinPortFwd](/06-linux-privesc/06-pivots.md#windows-port-fwd-plink)
4. **pth-winexe**
   1. REF: [PrivEscWin:PassTheHash](/07-win-privesc/win-privesc.md#pass-the-hash)
5. **runas**
   1. [WindowsCmdKungFu-nc-cmd](/07-win-privesc/windows-cmd-kungfu.md#runas)
6. **nc**
7. **smbserver.py**