WMIExec

KO | EN

gitlite — search

#react #ai #android #rust #deep-learning #linux #java #awesome #kubernetes #vue #awesome-list #security #mcp #ios

(★ 168)

Set of python scripts which perform different ways of command execution via WMI protocol.

파일 탐색기

최종 버전 다운로드 (.zip)

README.md
webserver_ssl.py
wmiexec_scheduledjob.py
wmiexec_win32process.py

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# WMIexec
Set of python scripts which perform different ways of command execution via WMI protocol.

## Blog Post
https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/

## Usage

### wmiexec_scheduledjob.py  
Is a python script which authenticates to a remote WMI instance and execute commands via Scheduled Tasks.

To run the script:  
```bash
python3 wmiexec_scheduledjob.py -i <ip_address> -u <username> -p <password> -c <command>
```

### wmiexec_win32process.py  
Is a python script which authenticates to a remote WMI instance and execute commands via `Win32_Process`.

To run the script:  
```bash
python3 wmiexec_win32process.py -i <ip_address> -u <username> -p <password> -c <command>
```

### webserver_ssl.py  
Is a python script which creates a HTTPS server (with a self-signed SSL certificate). Used to exfiltrate the command's output.

Before running the HTTP server, make sure to generate the certificates by running:

```bash
openssl genpkey -algorithm RSA -out server.key
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
```

If everything is done correctly, the server will be running without any error:  
```bash
python3 webserver_ssl.py
```

## Demo

![wmi_in_action](https://github.com/WKL-Sec/wmiexec/assets/97109724/5384a87d-a4b2-432e-9bfe-375a34cf9e7b)

## Credits  
https://github.com/XiaoliChan/wmiexec-RegOut  
https://learn.microsoft.com/en-us/windows/win32/cimwin32prov/win32-scheduledjob

## Author  
Kleiton Kurti ([@kleiton0x00](https://github.com/kleiton0x00))

WMIExec

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

WMIExec

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README