Rapid7

module

Windows Execute net user /ADD

Disclosed
N/A
Created
May 30, 2018

Description

Create a new user and add them to local administration group.

Note: The specified password is checked for common complexity
requirements to prevent the target machine rejecting the user
for failing to meet policy requirements.

Complexity check: 8-14 chars (1 UPPER, 1 lower, 1 digit/special)

Authors

hdm [email protected]
Chris John Riley

Platform

Windows

Architectures

x86

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use payload/windows/adduser
msf payload(adduser) > show actions
...actions...
msf payload(adduser) > set ACTION < action-name >
msf payload(adduser) > show options
...show and set options...
msf payload(adduser) > run

Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.