We Don't Need No Stinkin' PSExec

This report is a technical walkthrough showing how attackers or pentesters can use WMI and related tools (impacket wmiexec, pth-wmis/pth-wmic, Metasploit web_delivery) to perform remote, diskless code execution and lateral movement on Windows systems using either plaintext credentials or hashed credentials (pass-the-hash). It demonstrates command examples, base64-encoded PowerShell payload delivery, and notes AV detection issues with PSExec-style approaches while emphasizing WMI/RPC as a stealthier alternative for remote administration and compromise.