XiaoliChan/wmiexec-Pro

Health v2 · maintenance only

Adoption not part of the score

1295 stars · 150 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

wmiexec-Pro is a Python CLI tool built on Impacket that provides an enhanced version of wmiexec.py for remote command execution on Windows hosts via WMI, requiring only port 135. It includes modules for AV evasion, AMSI bypass, file transfer, RDP/WinRM enabling, firewall abuse, event log cleaning, and RID hijacking for lateral movement.

Use cases

• execute commands on remote windows hosts via wmi without smb
• bypass antivirus during lateral movement
• remotely enable rdp or winrm via wmi
• clean windows event logs on a target machine
• get a semi-interactive shell on a windows box with only port 135 open
• hijack RID on a remote windows host
• transfer files to a windows target over wmi

When to choose

• you need remote command execution on Windows where only port 135 is reachable
• you want to evade Windows Defender or other AV during red team operations
• you need post-exploitation modules like AMSI bypass, firewall abuse, or log cleaning in one tool

When to avoid

• you need a general-purpose C2 framework with persistent agents
• the target is not Windows or WMI is blocked
• you only have SMB access and no DCOM/WMI connectivity

Facets

cli-tool · maturity active

security penetration-testing cli security penetration-testing windows python cli windows wmi lateral-movement impacket av-evasion red-team post-exploitation remote-execution

Member repositories

For agents

markdown · JSON · MCP: product_card(name="XiaoliChan/wmiexec-Pro")