wmiexec-Pro

wmiexec-Pro Tabla de contenido 1. Información 2. Agradecimientos especiales 3. Características 4. Cómo empezar Instalación 5. Uso 6. Capturas de pantalla 7. ¿Cómo funciona? 8. Aviso legal 9. Referencias Información La nueva generación de wmiexec.py, con más funciones nuevas; todas las operaciones...

WMIExec

WMIexec 一组Python脚本，通过WMI协议以不同方式执行命令。 博客文章 https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ 使用方法 wmiexecscheduledjob.py 是一个Python脚本，通过计划任务认证到远程WMI实例并执行命令。 运行脚本： root@kitploit: python3 wmiexecscheduledjob.py -i -u -p -c wmiexecwin32process.py...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

wmiexec-RegOut

⛔ 已弃用 已迁移至 https://github.com/XiaoliChan/wmiexec-Pro wmiexec-RegOut impacket wmiexec.py、wmipersist.py 的修改版本。从注册表获取输出（数据、响应），不需要 SMB 连接，但我的代码写得很糟糕 : 目录 概述 要求 用法 速查表 待办事项 参考 特别感谢： @rootclay，微信：xiangshan 概述 在原始 wmiexec.py 中，它通过 SMB 连接（端口 445、139）获取响应。不幸的是，一些杀毒软件将这些端口视为高风险并进行监控。 在这种情况下，我放弃了 SMB...

CVE-2020-1472

CVE-2020-1472 arp-scan Rangip nmap -A -vv -Pn IPADDR python3 setemptypw.py DCNETBIOSNAME DCIPADDR python3 secretsdump.py -no-pass -just-dc DOMAIN/DCNETBIOSNAME$@DCIPADDR python3 wmiexec.py -hashes HassPasswdUser DOMAIN/User@dcipaddr comando de Windows whoami systeminfo hostname md testdir echo te...

WMIExec - Set Of Python Scripts Which Perform Different Ways Of Command Execution Via WMI Protocol

Set of python scripts which perform different ways of command execution via WMI protocol. Blog Post https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ Usage wmiexecscheduledjob.py Is a python script which authenticates to a remote WMI instance and execute commands vi...

Lsassy - Extract Credentials From Lsass Remotely

Python library to remotely extract credentials. This blog post explains how it works. You can check the wiki This library uses impacket project to remotely read necessary bytes in lsass dump and pypykatz to extract credentials. Requirements Python = 3.6 pypykatz = 0.3.0 impacket Installation From...