# XiaoliChan/wmiexec-Pro

New generation of wmiexec.py

Repository: https://github.com/XiaoliChan/wmiexec-Pro
Canonical: https://ross.abutalabs.com/products/wmiexec-pro
Language: Python
License: BSD-2-Clause
License Family: permissive
Last push: 2026-04-26T07:46:09+00:00

## Health v2 (maintenance only)
Score: 67/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 79, release rhythm 40, longevity 89
- inputs: {"age_days": 1247, "days_push": 129, "days_rel": 320, "gap_med": 73.0, "n_releases_24m": 3}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1295, forks 150 (observed 2026-08-28T04:04:16.411047+00:00)

## What it is
wmiexec-Pro is a Python CLI tool built on Impacket that provides an enhanced version of wmiexec.py for remote command execution on Windows hosts via WMI, requiring only port 135. It includes modules for AV evasion, AMSI bypass, file transfer, RDP/WinRM enabling, firewall abuse, event log cleaning, and RID hijacking for lateral movement.

## Use cases
- execute commands on remote windows hosts via wmi without smb
- bypass antivirus during lateral movement
- remotely enable rdp or winrm via wmi
- clean windows event logs on a target machine
- get a semi-interactive shell on a windows box with only port 135 open
- hijack RID on a remote windows host
- transfer files to a windows target over wmi

## When to choose
- you need remote command execution on Windows where only port 135 is reachable
- you want to evade Windows Defender or other AV during red team operations
- you need post-exploitation modules like AMSI bypass, firewall abuse, or log cleaning in one tool

## When to avoid
- you need a general-purpose C2 framework with persistent agents
- the target is not Windows or WMI is blocked
- you only have SMB access and no DCOM/WMI connectivity

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, cli
- domain: security, penetration-testing, windows
- platform: python, cli, windows
- tags: wmi, lateral-movement, impacket, av-evasion, red-team, post-exploitation, remote-execution

## Member repositories
- XiaoliChan/wmiexec-Pro (main) score 67

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:16.411047+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:53:59.946671+00:00, confidence not recorded.
  - readme: https://github.com/XiaoliChan/wmiexec-Pro (fetched 2026-08-28T04:04:16.411047+00:00, sha 32238dd08820)
- Data as of 2026-08-30T08:39:29.467469+00:00.