---
id: 8315
title: "Exploiting Trusted Hosts in WinRM"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/adversary-simulation/exploiting-trusted-hosts-in-winrm/"
published_at: "2012-10-29T00:00:00Z"
tags: ["windows", "lateral-movement", "pentest", "misconfiguration", "winrm", "credential-relay"]
phying_url: "https://phying.com/item/8315"
lang: en
---

# Exploiting Trusted Hosts in WinRM

## Summary

Examines WinRM misconfigurations—unencrypted channels, Basic auth, permissive TrustedHosts—that let attackers intercept credentials or relay authentication for remote command execution.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2012-10-29T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/adversary-simulation/exploiting-trusted-hosts-in-winrm/
- **Phying News:** https://phying.com/item/8315