Remote Password Attacks

Network Services

WinRM

Windows Remote Management (WinRM) is the Microsoft implementation of the Web Services Management Protocol (WS-Management). It is a network protocol based on XML web services using the Simple Object Access Protocol (SOAP) used for remote management of Windows systems.

NetExec

netexec <proto> <target-IP> -u <user or userlist> -p <password or passwordlist>

i.e. netexec winrm 10.129.42.197 -u user.list -p password.list

Evil-WinRM

evil-winrm -i <target-IP> -u <username> -p <password>

SSH

Hydra-SSH

hydra -L user.list -P password.list ssh://<ip-address>

Remote Desktop Protocol (RDP)

Hydra-RDP

hydra -L user.list -P password.list rdp://<ip-address>

SMB

Hydra-SMB

hydra -L user.list -P password.list smb://<ip-address>