CmdID

CmdID / Commands

nxc-winrm

Pentest and exploit Windows Remote Management (winrm). tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Search for valid credentials by trying out every combination in the specified lists of usernames and passwords

nxc winrm 192.168.178.2 --username path/to/usernames.txt --password path/to/passwords.txtIdentify

Specify the domain to authenticate to (avoids an initial SMB connection)

nxc winrm 192.168.178.2 --username username --password password -d domain_nameIdentify

Execute the specified command on the host

nxc winrm 192.168.178.2 --username username --password password -x whoamiIdentify

Execute the specified PowerShell command on the host as administrator using LAPS

nxc winrm 192.168.178.2 --username username --password password --laps -X whoamiIdentify