Command Line Underdog: WMIC in Action
ID: cfb7d691-c273-5fe2-a6ec-5ae63b46a8d5
STIX ID: report--cfb7d691-c273-5fe2-a6ec-5ae63b46a8d5
Feed Name: TrustedSec blog
A practical technical guide showing how WMIC (wmi command-line) can be used as an alternative shell on locked-down Windows/Terminal Server environments: it details common Group Policy lockdown settings, demonstrates WMIC interactive and command-line usage (process creation, registry queries, system/network enumeration, file listing, remote execution and output redirection), provides registry hive constants, and presents an XSL/VBScript execution technique for more advanced data collection or code execution.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
