DevChecker
evil-winrm
| DevChecker | evil-winrm | |
|---|---|---|
| 1 | 4 | |
| 11 | 4,191 | |
| - | 2.0% | |
| 0.0 | 0.0 | |
| almost 2 years ago | 7 days ago | |
| C# | Ruby | |
| GNU General Public License v3.0 only | GNU Lesser General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
DevChecker
-
New remote device management tool
If I can find them all I can add them. Need their names and IDs. The ones I have so far are listed here: https://github.com/MikePohatu/DevChecker/blob/main/source/ConfigMgrHelpers/CmClient.cs
evil-winrm
-
HackTheBox - Writeup Authority [Retired]
┌──(root㉿kali)-[/home/kali/hackthebox/machines-windows/authority] └─# evil-winrm -i authority.htb -u svc_ldap -p 'lDaP_1n_th3_cle4r!' Evil-WinRM shell v3.4 Warning: Remote path completions is disabled due to ruby limitation: quoting_detection_proc() function is unimplemented on this machine Data: For more information, check Evil-WinRM Github: https://github.com/Hackplayers/evil-winrm#Remote-path-completion Info: Establishing connection to remote endpoint *Evil-WinRM* PS C:\Users\svc_ldap\Documents>
- Release v3.5 · Evil WinRM - This program can be used on any Microsoft Windows Servers with this feature enabled (usually at port 5985), of course only if you have credentials and permissions to use it.
-
Active Directory in CTFs
Evil-WinRM exploits WinRM, a protocol used by system administrators on Windows servers.
- GitHub - Hackplayers/evil-winrm: The ultimate WinRM shell for hacking/pentesting
What are some alternatives?
pywinrm - Python library for Windows Remote Management (WinRM)
rport - remote access and remote management
SharpStrike - A Post exploitation tool written in C# uses either CIM or WMI to query remote systems.
LAZYPARIAH - A tool for generating reverse shell payloads on the fly.
sccmclictr - Client Center for Configuration Manager
heimdal - Heimdal
TsGui - Custom GUIs in ConfigMgr
WhatWeb - Next generation web scanner
PowerShell - PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)
ruby-pwsh - A ruby gem for interacting with PowerShell
spellcheck-action - GitHub Action for checking code & Pull Requests for spelling mistakes
MIXON - Next generation cyber security research and testing software.