Winrm and Wmi session opener with NTLM and Kerberos authentication support. This are Impacket based WinRM client with support for NTLM and Kerberos authentication over HTTP and HTTPs in the spirit of other impacket attack kit.
You can run a single command with -X whoami /all, or use the "shell" mode to issue multiple commands. It depends on impacket, requests, and optionally prompt_toolkit python packages. If prompt_toolkit is not installed on your system, it defaults to the built-in readline module.
Important
Experimental evil_winrmrelayx.py adds a custom shell to replicate some of the features of evil-winrm like AMSI bypasses ability to download and upload files, run scripts/.NET executables from remote HTTP, etc.
Attack kit to help with Nim based script for post-exploitation and C2 agent implant mode enable.
For more, come to my collections of write-ups for real-world use cases and write-ups here, if there's any security concern, please contact me at byt3n33dl3@pm.me