TOOL TUTORIAL · Windows Remote Administration & Management

How to install and use Evil-WinRM

Evil-WinRM is a PowerShell remoting client specifically designed to interact with Windows Remote Management (WinRM) services. It provides an easy and efficient way to gain remote access to Windows machines, particularly useful for penetration testers and red teamers.

Quick install: gem install evil-winrm

Installation steps

  1. Make sure Ruby and its gem tool are installed
  2. Install with gem install evil-winrm
  3. On Kali you can instead run sudo apt install evil-winrm
  4. Check the version with evil-winrm --version
  5. Test against your own lab machine that has WinRM enabled

See the full Evil-WinRM reference →