https://github.com/mez-0/winrmdll

C++ WinRM API via Reflective DLL
https://github.com/mez-0/winrmdll

cobalt-strike cpp lateral-movement reflective-dll winrm

Last synced: 21 days ago
JSON representation

C++ WinRM API via Reflective DLL

• Host: GitHub
• URL: https://github.com/mez-0/winrmdll
• Owner: mez-0
• License: mit
• Created: 2021-09-11T13:40:22.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2021-09-11T13:44:16.000Z (over 3 years ago)
• Last Synced: 2024-08-05T17:27:25.094Z (4 months ago)
• Topics: cobalt-strike, cpp, lateral-movement, reflective-dll, winrm
• Language: C++
• Homepage: https://mez0.cc/posts/winrm-reflective-dll/
• Size: 220 KB
• Stars: 140
• Watchers: 3
• Forks: 28
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - mez-0/winrmdll - C++ WinRM API via Reflective DLL (C++)

README

        
# WinRMDLL

A while ago I produced [CSharpWinRM](https://github.com/mez-0/CSharpWinRM) which was alright, but I wanted to look at the [WinRM C++ API](https://docs.microsoft.com/en-us/windows/win32/winrm/winrm-c---api) properly. 

The project comes with an [Aggressor Script](dist/winrmdll.cna) for easy use:

![](images/help-winrmdll.PNG)

**Using credentials**:

![](images/winrmdll-creds.PNG)

**Without credentials**:

![](images/winrmdll-no-creds.PNG)

Don't do what I did and put the command at the end and spend an hour being confused as to why the username was now `whoami`...