Using WinRM Through Meterpreter
ID: 8a6b19d1-6fb2-5f6a-a326-010b89ce544e
STIX ID: report--8a6b19d1-6fb2-5f6a-a326-010b89ce544e
Feed Name: TrustedSec blog
This article provides a practical walkthrough for using WinRM and PowerShell (Connect-WSMan, Invoke-Command) from a Meterpreter shell to perform stealthier, credentialed remote command execution on domain-joined Windows systems, including troubleshooting steps for authentication/encryption constraints and examples of creating credential objects and invoking remote code.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.