> For the complete documentation index, see [llms.txt](https://kwcsec.gitbook.io/the-red-team-handbook/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kwcsec.gitbook.io/the-red-team-handbook/techniques/lateral-movement/wmi.md).

# WMI

WMI can be used to access remote windows components using RPC calls on TCP port 135.

Ex. 

```
wmic /node:REMOTEIP /user:DOMAIN\USER /password:PASSWORD process call create“C:\Windows\System32\notepad.exe”
```