WTFBins

  • OpenVAS runs WMIExec


    Contributed By: mttaggart

    When connecting to Windows hosts, OpenVAS will run impacket-wmiexec against the host. The resulting events look identical to a secretsdump run that you'd hunt for.