> For the complete documentation index, see [llms.txt](https://heinosass.gitbook.io/leet-sheet/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heinosass.gitbook.io/leet-sheet/network-hacking/winrm.md).

# WinRM

WinRM is a Windows remote management tool that runs on port 5985. If you have credentials to a user, then you can use this to get a shell:

```
gem install evil-winrm
evil-winrm -i IP_ADDRESS -u USER -p PASSWORD
```

{% embed url="<https://github.com/Hackplayers/evil-winrm>" %}