evil-winrm-py

No entries match these filters. Clear filters

1. v1.7.0 Sep 12, 2026 · issue 073

   evil-winrm-py v1.7.0 adds an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server mode for AI agent access and JEAJEAA PowerShell feature from Microsoft that lets administrators constrain remote sessions to a defined set of commands and roles, limiting what any user or service account can do on a Windows system. endpoint support via new CLI flags.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.7.0 https://github.com/adityatelange/evil-winrm-py.git
   # already have the repo? check out this version:
   $ git checkout v1.7.0

   └──▷ TRY IT
   Expose a WinRM session as MCP tools for an AI agent to authenticate and run commands against a Windows host.
   copy

   $ evil-winrm-py --mcp --mcp-host 127.0.0.1 --mcp-port 8000

   Connect to a restricted JEA endpoint on a Windows host to operate within a least-privilege PowerShell session configuration.
   copy

   $ evil-winrm-py -i 192.168.1.100 -u operator -p P@ssw0rd -c JEA_Endpoint

   • Adds --mcp flag to start evil-winrm-py as an MCP server in streamable HTTP mode, with --mcp-host (default 127.0.0.1) and --mcp-port (default 8000) to configure the listener address.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Exposes four MCP tools over the server: winrm_login, winrm_execute, winrm_logout, and list_sessions, supporting multiple concurrent WinRM sessions each tracked by a session_id.
   • Adds -c/--configuration-name CLI flag to connect to a constrained JEA endpoint instead of the default Microsoft.PowerShell full PowerShell session, available in both interactive shell and MCP server modes.
   • Remote tab-completion adapts to the commands available on the connected JEA endpoint, and menu commands unsupported under JEA are automatically disabled in the interactive shell.
   • Respects the NO_COLOR environment variable to suppress color output.

   +1 more show less

   • Makes remote_path optional in upload and local_path optional in download menu commands.
   • Adds --mcp flag to start evil-winrm-py as an MCP server in streamable HTTP mode, with --mcp-host (default 127.0.0.1) and --mcp-port (default 8000) to configure the listener address.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Exposes four MCP tools over the server: winrm_login, winrm_execute, winrm_logout, and list_sessions, supporting multiple concurrent WinRM sessions each tracked by a session_id.
   • Adds -c/--configuration-name CLI flag to connect to a constrained JEA endpoint instead of the default Microsoft.PowerShell full PowerShell session, available in both interactive shell and MCP server modes.
   • Remote tab-completion adapts to the commands available on the connected JEA endpoint, and menu commands unsupported under JEA are automatically disabled in the interactive shell.

   2 more in Everything

2. v1.6.0 Mar 21, 2026 · release notes

   evil-winrm-py v1.6.0 adds runexe, loaddll, and services commands plus PowerShell tab completion.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.6.0 https://github.com/adityatelange/evil-winrm-py.git
   # already have the repo? check out this version:
   $ git checkout v1.6.0

   └──▷ TRY IT
   Enumerate non-system services on the remote machine to identify privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. targets.
   copy

   $ services

   • Adds runexe command to upload and execute local executables on the remote host, with support for passing arguments.
   • Adds loaddll command to load a remote DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. as a PowerShell module.
   • Adds services command to list running non-system services on the remote machine.
   • Adds tab auto-completion for PowerShell cmdlets and aliases in the interactive shell.
   • Supports multiple encodings when reading PowerShell scripts loaded via load_ps.

   +2 more show less

   • Enables case-insensitive function name matching in load_ps.
   • Strips single quotes from paths when drag-and-dropping files for uploads/downloads.

   7 details in Everything

3. v1.5.0 Sep 6, 2025 · release notes

   evil-winrm-py v1.5.0 adds runps for local PowerShell script execution and tab completion for remote executables.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.5.0 https://github.com/adityatelange/evil-winrm-py.git
   # already have the repo? check out this version:
   $ git checkout v1.5.0

   └──▷ TRY IT
   Run a local PowerShell script on the remote host mid-session without manually uploading it first.
   copy

   $ runps /path/to/local/script.ps1

   • New runps command executes local PowerShell scripts directly from the interactive shell without pre-uploading.
   • Adds tab completion for executable files in the current remote directory, speeding up lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. workflows.
   • Improves KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. credential handling for compatibility with updated gssapi library.
   • Enhances load_ps to provide feedback and update command suggestions when new scripts are loaded.

   4 details in Everything

4. v1.4.0 Aug 8, 2025 · release notes

   evil-winrm-py v1.4.0 adds optional username for KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. ticket auth, tilde expansion, and Kerberos debug tracing.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.4.0 https://github.com/adityatelange/evil-winrm-py.git
   # already have the repo? check out this version:
   $ git checkout v1.4.0

   └──▷ TRY IT
   Trace Kerberos negotiation in detail when troubleshooting SPN or realm issues.
   copy

   $ evil-winrm-py -k -i dc01.corp.local --debug

   Upload a file from your home directory without typing the full path.
   copy

   $ upload ~/tools/mimikatz.exe C:\Windows\Temp\m.exe

   • Makes -u/--user optional when using ticket-based Kerberos auth — username is pulled automatically from the GSSAPI credentials cache.
   • Enables Kerberos trace logging automatically when --debug mode is active.
   • Supports tilde (~) expansion in local path arguments (e.g., upload ~/file.txt .).
   • Warns when no Kerberos credential cache is found, surfacing auth misconfigurations early.

   4 details in Everything

5. v1.3.0 Aug 2, 2025 · release notes

   evil-winrm-py v1.3.0 adds loadps to source local PowerShell scripts into remote sessions with smart tab completion.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.3.0 https://github.com/adityatelange/evil-winrm-py.git
   # already have the repo? check out this version:
   $ git checkout v1.3.0

   └──▷ TRY IT
   Load a local PowerShell script into your active evil-winrm-py session to call its functions remotely — useful for staging recon or post-exploitation tooling without uploading files.
   copy

   $ loadps /opt/scripts/PowerView.ps1

   • New loadps command loads functions from a local .ps1 script directly into the remote PowerShell session, with validation of file existence and extension before loading.
   • Functions loaded via loadps are automatically added to tab completion in the remote shell, making them instantly discoverable.

   2 details in Everything

6. v1.2.0 Jul 25, 2025 · release notes

   evil-winrm-py v1.2.0 adds a short ewp alias, customizable User-Agent header, and auto-defaulting KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. SPN prefix.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.2.0 https://github.com/adityatelange/evil-winrm-py.git
   # already have the repo? check out this version:
   $ git checkout v1.2.0

   └──▷ TRY IT
   Blend in with legitimate WinRM traffic by spoofing a custom User-Agent during a red-team engagement.
   copy

   $ ewp -i 192.168.1.10 -u Administrator -p 'P@ssw0rd' --user-agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)'

   • Adds ewp as a shorter entry-point alias alongside evil-winrm-py for faster invocation.
   • New --user-agent argument lets operators customize the WinRM client User-Agent string (defaults to the standard Microsoft WinRM Client value).
   • Automatically applies an http SPN prefix when none is supplied, reducing Kerberos Server not found in database errors in Kerberos-authenticated sessions.

   3 details in Everything

7. v1.1.0 Jun 13, 2025 · release notes

   evil-winrm-py v1.1.0 adds a --debug flag for enhanced debug logging.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.1.0 https://github.com/adityatelange/evil-winrm-py.git
   # already have the repo? check out this version:
   $ git checkout v1.1.0

   └──▷ TRY IT
   Troubleshoot authentication or connection issues by enabling verbose debug output.
   copy

   $ evil-winrm-py --debug -i <target> -u <username> -p <password>

8. v1.0.0 Jun 1, 2025 · release notes

   evil-winrm-py v1.0.0: Python WinRM shell with NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent., Pass-the-Hash, KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application., cert auth, and file transfer

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.0.0 https://github.com/adityatelange/evil-winrm-py.git
   # already have the repo? check out this version:
   $ git checkout v1.0.0

   • New interactive shell for executing commands on remote Windows systems via WinRM.
   • Supports NTLM, Pass-the-Hash, Certificate, and Kerberos authentication methods.
   • Enables SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination.-encrypted WinRM sessions for secure communications.
   • Supports file upload and download between local and remote Windows machines.
   • Includes tab completion for remote paths, command history, and colorized output.

   +1 more show less

   • Cross-platform: runs on both Windows and Linux.

   6 details in Everything