Impacket-wmiexec

ExecutionLinuxWindowsActiveDirectory

Impacket's wmiexec.py uses the Windows Management Instrumentation (WMI) to give you an interactive shell on the Windows host. Command Reference: Target IP: 10.10.10.1 Domain: test.local Username: john Password: password123

python3 wmiexec.py test.local/john:password123@10.10.10.1

Evidence: Upstream reference
Environment: Active Directory
Native: Exploitation
Requires: Password, Username
Services: WMI
Refs: github.com/SecureAuthCorp/impacket/blob/master/examples/wmiexec.py
riccardoancarani.github.io/2020-05-10-hunting-for-impacket/#wmiexecpy