WMI (135)

Windows Management Instrumentation.

Protocol Information

Windows Management Instrumentation (WMI) provides read and write access to almost all settings on Windows systems. WMI is not a single program, but consists of several programs and various databases, also known as repositories. Initialization of WMI communication always takes place on TCP port 135, and after the connection is successfully established, communication is moved to a random port.

Port

135 TCP	WMI HTTP

Interact

Windows

WMIC /?

WMIC <COMMAND>

Tools

Tools	Details
impacket-wmiexec	wmiexec.py [<DOMAIN>/]<USER>[:<PASS>]@<IP>