WMI Based Agentless Post-Exploitation PowerShell RAT: WMImplant
WMI Based Agentless Post-Exploitation PowerShell RAT WMImplant is a PowerShell based tool that leverages WMI to both perform actions against targeted machines, but also as the C2 channel for issuing commands and receiving results. WMImplant will likely require local administrator permissions on the targeted machine. It is designed to run both interactively and non-interactively. When using WMImplant interactively, it’s designed to have a menu of commands reminiscent of Meterpreter. WMI Based Agentless Post-Exploitation PowerShell RAT: WMImplant WMImplant Functions: Meta Functions change_user – Change the context of the user you will execute WMI commands as exit – Exits WMImplant gen_cli – Generate the command line command to use WMImplant non-interactively set_default – Sets the targeted system’s WMI property back to its default value help – View the list of commands and descriptions File Operations cat – Reads the contents of a file download – Download a file ...