Certificate-based Authentication over WinRM
Tags
cmtmf-attack-pattern: Command-Line Interface
attack-pattern: Code Signing - T1553.002 Command-Line Interface - T1605 Credentials - T1589.001 Digital Certificates - T1596.003 Digital Certificates - T1587.003 Digital Certificates - T1588.004 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Windows Remote Management - T1021.006 Tool - T1588.002 Code Signing - T1116 Command-Line Interface - T1059 Powershell - T1086 Sudo - T1169 Windows Remote Management - T1028 Command-Line Interface
Show in Graph
Common Information
Type Value
UUID 461f45a7-afe4-486b-8417-310734ef94f9
Fingerprint 1c1be15b1923efc0
Analysis status DONE
Considered CTI value 0
Text language
Published June 14, 2023, 5:39 p.m.
Added to db June 14, 2023, 8 p.m.
Last updated Nov. 17, 2024, 12:55 p.m.
Headline Certificate-based Authentication over WinRM
Title Certificate-based Authentication over WinRM
Detected Hints/Tags/Attributes 45/2/18
Source URLs
Redirection Url
Details Source https://medium.com/r3d-buck3t/certificate-based-authentication-over-winrm-13197265c790?source=rss------cybersecurity-5
Details Source https://medium.com/r3d-buck3t/certificate-based-authentication-over-winrm-13197265c790?source=rss------infosec-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 168 ✔ Infosec on Medium https://medium.com/feed/tag/infosec 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
slproweb.com
Details Domain 1 
connection.new
Details Domain 1 
conn.shell
Details Domain 12 
shell.run
Details File 15 
private.key
Details File 2 
request.cs
Details File 1 
win32openssl.html
Details File 8 
openssl.exe
Details File 1 
certnew.cer
Details File 1 
winrm_shell.rb
Details File 1 
'certnew.cer
Details File 1 
'private.key
Details File 3 
certificate.pfx
Details sha1 1 
9ccd95dc498eace8e59396b8408d7b7d5811ed4a
Details IPv4 1 
10.10.10.103
Details Url 1 
https://slproweb.com/products/win32openssl.html
Details Url 1 
https://10.10.10.103/certsrv
Details Url 1 
https://10.10.10.103:5986/wsman