Invoke-WMIExec Pass-the-Hash

Main Function

Use the known username and NTLM hash to execute the payload on the target host via WMI.

This module executes WMI in memory using the Invoke-WMIExec method. Compared with "WMI Pass-the-Hash", it does not require file upload.

Operation Method