Bug#960731: ITP: evil-winrm -- Ultimate WinRM shell for hacking/pentesting
Package: wnpp
Severity: wishlist
Owner: Pedro Loami Barbosa dos Santos <pedro@loami.eng.br>
* Package name : evil-winrm
Version : 2.3
Upstream Author : Óscar Alfonso Díaz <oscar.alfonso.diaz@gmail.com>
* URL : https://github.com/Hackplayers/evil-winrm
* License : LGPL-3
Programming Lang: ruby
Description : Ultimate WinRM shell for hacking/pentesting
This shell is the ultimate WinRM shell for hacking/pentesting.
.
WinRM (Windows Remote Management) is the Microsoft implementation of
WS-Management Protocol. A standard SOAP based protocol that allows hardware
and operating systems from different vendors to interoperate. Microsoft
included it in their Operating Systems in order to make life easier to system
administrators.
.
This program can be used on any Microsoft Windows Servers with this feature
enabled (usually at port 5985), of course only if you have credentials and
permissions to use it. So it can be said that it could be used in a post-
exploitation hacking/pentesting phase. The purpose of this program is to
provide nice and easy-to-use features for hacking. It can be used with
legitimate purposes by system administrators as well but the most of its
features are focused on hacking/pentesting stuff.
This program is really useful while performing penetration testing,
security auditing, vulnerability analysis, or just playing at some CTF
box. With a system credential in hand, accessing winrm is usually an initial
foothold for entering the machine and starting running commands,
and for that evil-winrm is great. It also allows other things like,
uploading/downloading files, loading binaries/scripts in memory, using pass-the-hash,etc.
It should be a great package to Debian as it's a great tool to
a security professional to have on his/her machine.
I intend to maintain this package mentored by a friend DD, although any suggestions or contributions will be welcome.
Reply to: