Screenshots
Example Usage
Usage: evil-winrm -i IP -u USER [-s SCRIPTS_PATH] [-e EXES_PATH] [-P PORT] [-a USERAGENT] [-p PASS] [-H HASH] [-U URL] [-S] [-c PUBLIC_KEY_PATH ] [-k PRIVATE_KEY_PATH ] [-r REALM] [-K TICKET_FILE] [--spn SPN_PREFIX] [-l]
-S, --ssl Enable ssl
-c, --pub-key PUBLIC_KEY_PATH Local path to public key certificate
-k, --priv-key PRIVATE_KEY_PATH Local path to private key certificate
-r, --realm DOMAIN Kerberos auth, it has to be set also in /etc/krb5.conf file using this format -> CONTOSO.COM = { kdc = fooserver.contoso.com }
-K, --ccache TICKET_FILE Path to Kerberos ticket file (ccache or kirbi format, auto-detected)
-s, --scripts PS_SCRIPTS_PATH Powershell scripts local path
--spn SPN_PREFIX SPN prefix for Kerberos auth (default HTTP)
-e, --executables EXES_PATH C# executables local path
-i, --ip IP Remote host IP or hostname. FQDN for Kerberos auth (required)
-U, --url URL Remote url endpoint (default /wsman)
-u, --user USER Username (required if not using kerberos)
-p, --password PASS Password
See also
Evil-WinRM
Open Source
Kali
Full-featured WinRM shell for hacking and penetration testing. Supports pass-the-hash, file upload/d…
Sliver
Open Source
Open-source C2 framework from BishopFox. Supports mTLS, WireGuard, HTTP/S, and DNS C2 channels. Feat…
Covenant
Open Source
.NET-based C2 framework with a collaborative web interface. Uses .NET Grunts as implants, supports a…
AndroidHack_BackDoor
Free
Kali
Android-BackDoor is a python and shell script that simplifies the process of adding a backdoor to an…
PassTester
Open Source
Identify the accounts most vulnerable to dictionary attacks…
Ravage
Open Source
Ravage Framework - Powershell weaponized for offensive security professionals.…