rootclay/WMIHACKER

再增加winhash连接就完美了

Closed this issue · 5 comments

wpf97 commented
再增加winhash连接就完美了

工具支持PTH,彩蛋在代码中。

工具配合mimikatz可以直接进行PTH

wpf97 commented

看了半天,实在是不懂vbs代码,只能再请教一下老哥了

第54-58行代码:

if user = "-" And pass = "-" Then
set objWMIService = objLocator.connectserver(host,"root/cimv2")
Set SubobjSWbemServices = objLocator.ConnectServer(host, "root\subscription")
Set regWMIService = objLocator.ConnectServer(host, "root\default")

用户名和密码填“-”,结合mimikatz的PTH就可以进行WMI的PTH了。

wpf97 commented

谢谢了