Remote execution (WinRM, PsExec, WMI)

Connect with credentials through evil-winrm, psexec, wmiexec or RunasCs. Used in 39 machines, sorted from easiest to hardest. The ▶ link takes you to the minute of the video where it is used.

Cheatsheets and tools

Often goes with

Combine this technique with others in the search →