Skip to content

Conversation

@0xbbuddha
Copy link

@0xbbuddha 0xbbuddha commented Jan 2, 2026

This PR adds evil-winrm-py, a Python implementation of a WinRM shell for Windows and Active Directory pentesting.

Let me know if any adjustments are needed.

@0xbbuddha 0xbbuddha requested a review from noptrix as a code owner January 2, 2026 09:39
@noraj
Copy link
Contributor

noraj commented Jan 2, 2026

The tool doesn't seem to bring much features compared to the original https://github.com/Hackplayers/evil-winrm. Upstream (rb evil-winrm) is still maintained, this project (py evil-winrm) is just a python port. It's (py) not easier to use or more accessible that way. However, it's true the original tool (rb) has a very bad architecture (2k LoC long one-file) which make it hard to contribute to it but easy to drop on a remote system. But anyway, that tool is still featureful and easy to use, I don't see interest into packaging a redundant tool doing exactly the same for end users.

@0xbbuddha
Copy link
Author

Thanks for the detailed feedback, that makes sense.

I agree that from an end-user perspective the Ruby version already covers the use case very well and is still actively maintained, and I understand the concern about avoiding redundant tools in BlackArch.

One motivation for this PR was that Ruby can sometimes be an obstacle for some users or environments, whereas Python can make the tool a bit more friendly and accessible in certain setups. That said, I agree this alone may not be a strong enough reason to justify packaging a redundant tool.

No problem closing this PR if you feel it doesn’t fit the project’s scope.
Thanks for taking the time to review it.

@noraj
Copy link
Contributor

noraj commented Jan 2, 2026

One motivation for this PR was that Ruby can sometimes be an obstacle for some users or environments, whereas Python can make the tool a bit more friendly and accessible in certain setups. That said, I agree this alone may not be a strong enough reason to justify packaging a redundant tool.

I may be true outside distro packaging systems, for people wanting to install tools manually, but that precisely one of the interests of distro packaging, either way, whatever the programming language is behind, the BlackArch user will install it with pacman -S in both cases and don't have to mind how the language ecosystem is working.

No problem closing this PR if you feel it doesn’t fit the project’s scope.

I'll let the others decide. But thank you for your contribution anyway.

@ikstream
Copy link
Member

ikstream commented Jan 2, 2026

I had some engagements recently where evil-winrm-py was the tool of choice, as evil-winrm behaved unstable and connections have been lost.
So it might be a good alternative.

unfortunately we hadn’t had enough time to investigate what caused the instability.

@D3vil0p3r
Copy link
Contributor

@0xbbuddha meanwhile please check the pkgcheck workflow error and fix it.

@0xbbuddha
Copy link
Author

@0xbbuddha meanwhile please check the pkgcheck workflow error and fix it.

done

@noraj noraj requested a review from ikstream January 8, 2026 15:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants