wmic(1)

πŸ“¦ version 22.5.10, in alpine 3.24, nixos 26.05, nixpkgs unstable

πŸ¦‹ wmic(1) β€” General Commands Manual πŸ¦‹

okay bestie, this is wmic β€” the command-line tool for querying a registry or RSOP service on a remote Windows host via WMI, and it’s giving very specific remote-admin energy. ✨

πŸ’– NAME πŸ’–

wmic β€” Command line tool to query a registry or RSOP service on a remote Windows host via WMI.

🌸 SYNOPSIS 🌸

wmic OPTIONS //host query

πŸŽ€ DESCRIPTION πŸŽ€

This tool lets you run a query for a registry or RSOP service running on a remote Windows system via WMI. It is derived from the samba tools and shares several options with other samba tools. No cap β€” that’s literally the whole description, and it ate. πŸ’…

✨ OPTIONS ✨

okay so here’s the whole options menu β€” every single one, bestie, no skipping:

  • --namesspace=STRING β€” WMI namespace; default is root.
  • --delimiter=STRING β€” delimiter to use when querying multiple values; default is '|'.
  • -?, --help β€” show help.
  • --usage β€” display brief usage message.
  • -d, --debuglevel=DEBUGLEVEL β€” set debug level.
  • --debug-stderr β€” send debug output to STDERR.
  • -s, --configfile=CONFIGFILE β€” use alternative configuration file.
  • --option=NAME=VALUE β€” set smb.conf option from command line.
  • -l, --log-basename=LOGFILEBASE β€” basename for log/debug files.
  • --leak-report β€” enable talloc leak reporting on exit.
  • --leak-report-full β€” enable full talloc leak reporting on exit.
  • -R, --name-resolve=NAME-RESOLVE-ORDER β€” use these name resolution services only.
  • -O, --socket-options=SOCKETOPTIONS β€” socket options to use.
  • -n, --netbiosname=NETBIOSNAME β€” primary netbios name.
  • -W, --workgroup=WORKGROUP β€” set the workgroup name.
  • --realm=REALM β€” set the realm name.
  • -i, --scope=SCOPE β€” use this Netbios scope.
  • -m, --maxprotocol=MAXPROTOCOL β€” set max protocol level.
  • -U, --user=[DOMAIN]USERNAME[%PASSWORD] β€” set the network username.
  • -N, --no-pass β€” don’t ask for a password.
  • --password=STRING β€” password.
  • -A, --authentication-file=FILE β€” get the credentials from a file.
  • -S, --signing=on|off|required β€” set the client signing state.
  • -P, --machine-pass β€” use stored machine account password (implies -k).
  • --simple-bind-dn=STRING β€” DN to use for a simple bind.
  • -k, --kerberos-file=STRING β€” use Kerberos.
  • --use-security-mechanisms=STRING β€” restricted list of authentication mechanisms available for use with this authentication.
  • -V, -version β€” print version.

πŸ”₯ EXAMPLES πŸ”₯

wmic -U [domain/]adminuser%mysecret //192.168.1.42 "select * from Win32_ComputerSystem"

Connect to the Windows system running at IP address 192.168.1.42 with the user "adminuser" in domain "domain" and the password "mysecret". Then run the query and return the results. If you drop the password, it will be asked for. Periodt. 🫢

🧚 MORE INFORMATION 🧚

The canonical places where you will find more information about OpenVAS are:

  • Community Portal
  • Development Platform
  • Traditional home site

The smb module is released under the GNU GPL, version 2, or, at your option, any later version.


πŸ’Œ cute sign-off: the footer source/version bits are Manuals, section User, and page wmic(1). No date is printed on this footer, ngl β€” that’s the whole footer vibe, bestie. 🫢

πŸ“¦ where this page comes from