Skip to content

Latest commit

 

History

History
39 lines (26 loc) · 805 Bytes

5985-5986-winrm.md

File metadata and controls

39 lines (26 loc) · 805 Bytes
description
Windows Remote Management (WinRM) is a remote management tool that allows a user to connect to a remote machine via command-line interface (CLI).

🎮 5985, 5986/WINRM

Overview

  • Provides remote access to Windows machines.
  • With password OR hash.
  • Remember that when we see these ports open, we will have a 99% chance of utilizing Evil-WinRM to connect to the box.

LAPS in use?

  • Use the —laps option with CrackMapExec.

    crackmapexec winrm 192.168.1.0/24 -u user -p password --laps

Password Spraying:

crackmapexec winrm 192.168.1.0/24 -u usernames -p passwords --no-bruteforce

Authentication:

crackmapexec winrm 192.168.1.0/24 -u user -p password

Tools:

Evil-WinRM (Tool)

CrackMapExec