Windows Remote Management

Footprinting The Service

Nmap

nmap -sV -sC 10.129.201.248 -p5985,5986 --disable-arp-ping -n

WRM Interaction

evil-winrm -i 10.129.201.248 -u Cry0l1t3 -p P455w0rD!