---
id: 9470
title: "SCOMmand And Conquer – Attacking System Center Operations Manager (Part 2)"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2025/12/10/scommand-and-conquer-attacking-system-center-operations-manager-part-2/"
published_at: "2025-12-10T17:00:00Z"
phying_url: "https://phying.com/item/9470"
lang: en
---

# SCOMmand And Conquer – Attacking System Center Operations Manager (Part 2)

## Summary

We found that SCOM RunAs credentials could be obtained on-host and also off-host in certain configurations and wrote a tool to help automate their recovery. To skip straight to the tool, go here https://github.com/breakfix/SharpSCOM

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2025-12-10T17:00:00Z
- **Original:** https://specterops.io/blog/2025/12/10/scommand-and-conquer-attacking-system-center-operations-manager-part-2/
- **Phying News:** https://phying.com/item/9470