Authentication

Testing credentials

You can use two methods to authenticate to the WMI: windows or local (default: windows). To use local auth, add the following flag --local-auth

Windows auth

• With SMB port open

nxc wmi <target> -u <username> -p '<password>'

• With SMB port close, add the flag -d DOMAIN

nxc wmi <target> -u <username> -p '<password>' -d <domain>

Expected Results:

WMI       <target>     135   MANTIS           [+] <domain>\<username>:<password>

Local auth

nxc wmi <target> -u <username> -p '<password>' --local-auth