evil-winrm
WinRM shell via password, hash or certificate.
An interactive shell over WinRM (port 5985/5986), the most comfortable way to operate on Windows when the user is in Remote Management Users. It accepts a password, an NT hash (Pass-the-Hash) or a certificate, and bundles helpers to upload/download files and load scripts.
Family Access, shells & transfer
Flags -i -u -H -c -k -S
Concepts Pass-the-Hash, WinRM over SSL/TLS with certificate authentication
Cheatsheet WinRM · 5985 / 5986
Installation
sudo apt install -y evil-winrm # empaquetado en Kali
gem install evil-winrm # alternativa universal (RubyGems)Useful commands
Appears in
Some machines where its use is documented; not an exhaustive list.