Screenshots
Example Usage
Usage: evil-winrm -i IP -u USER [-s SCRIPTS_PATH] [-e EXES_PATH] [-P PORT] [-a USERAGENT] [-p PASS] [-H HASH] [-U URL] [-S] [-c PUBLIC_KEY_PATH ] [-k PRIVATE_KEY_PATH ] [-r REALM] [-K TICKET_FILE] [--spn SPN_PREFIX] [-l]
-S, --ssl Enable ssl
-c, --pub-key PUBLIC_KEY_PATH Local path to public key certificate
-k, --priv-key PRIVATE_KEY_PATH Local path to private key certificate
-r, --realm DOMAIN Kerberos auth, it has to be set also in /etc/krb5.conf file using this format -> CONTOSO.COM = { kdc = fooserver.contoso.com }
-K, --ccache TICKET_FILE Path to Kerberos ticket file (ccache or kirbi format, auto-detected)
-s, --scripts PS_SCRIPTS_PATH Powershell scripts local path
--spn SPN_PREFIX SPN prefix for Kerberos auth (default HTTP)
-e, --executables EXES_PATH C# executables local path
-i, --ip IP Remote host IP or hostname. FQDN for Kerberos auth (required)
-U, --url URL Remote url endpoint (default /wsman)
-u, --user USER Username (required if not using kerberos)
-p, --password PASS Password
See also
DoubleTeam
Free
Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many …
Ankou
Open Source
A flexible, AI powered C2 framework built with operators in mind…
Ligolo-ng
Open Source
Advanced tunneling/pivoting tool that creates a VPN-like tunnel from the agent to the operator witho…
chainreactor
Free
ChainReactor is a research project that leverages AI planning to discover exploitation chains for pr…
VMkatz
Open Source
Extract Windows credentials directly from VM memory snapshots and virtual disks…
deepce
Open Source
Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)…