Skip to content
forked from C-Sto/goWMIExec

Really stupid re-implementation of invoke-wmiexec

Notifications You must be signed in to change notification settings

hktalent/goWMIExec

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

36 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

goWMIExec

Based on https://github.com/checkymander/Sharp-WMIExec/blob/master/Sharp-InvokeWMIExec/Program.cs

Which is based on https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1

Currently a (functional) work in progress.

Features:

  • Can authenticate using hash-only
  • Don't need to install impacket
  • Native go and byte bashing on TCP sockets, no need to run on Windows

Limitations:

  • Lots of static bytes. Future development will turn these into proper structures, and hopefully allow for other DCOM/COM methods to be used
  • Long commands won't work. Make them shorter, or create a PR to implement fragments in the Exec method.

Example: goWMIExec -target "172.16.50.202:135" -username "vagrant" -hash "e02bc503339d51f71d913c245d35b50b" -command 'C:\Windows\system32\cmd.exe /c echo test > C:\test.txt'

About

Really stupid re-implementation of invoke-wmiexec

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Go 100.0%