Alternatives to Evil-WinRM
WinRM shell for post-exploitation work on Windows with valid credentials. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Evil-WinRM
WinRM shell for post-exploitation work on Windows with valid credentials.
Replacements
Listings that take over the same core job as Evil-WinRM.
NetExec
Assess network services during authorized enterprise security tests.
NetExec runs command execution and authentication checks across many Windows network services at once, rather than providing an interactive WinRM shell, under BSD-2-Clause.
Impacket
Python library and tool collection for working with network protocols.
Impacket provides remote execution through SMB and MSRPC example scripts instead of WinRM, and runs on Windows too, under the BSD-2-Clause license.
Similar software
Related functionality, not a direct replacement.
Metasploit Framework
The standard open-source exploitation framework for authorised penetration testing and verifying that a vulnerability is real.
Sliver
Open-source adversary emulation and command-and-control framework.
Kerbrute
Enumerates Active Directory usernames and tests passwords through Kerberos.
Responder
LLMNR, NBT-NS and mDNS testing tool for internal network assessments.
BloodHound Community Edition
Maps attack paths through Active Directory and Entra ID relationships.
enum4linux-ng
Inspect information exposed by Windows and Samba services.
