> For the complete documentation index, see [llms.txt](https://www.netexec.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.netexec.wiki/winrm-protocol.md).

# WINRM protocol

- [Password Spraying](https://www.netexec.wiki/winrm-protocol/password-spraying.md)
- [Authentication](https://www.netexec.wiki/winrm-protocol/authentication.md)
- [Command Execution](https://www.netexec.wiki/winrm-protocol/command-execution.md)
- [Defeating LAPS](https://www.netexec.wiki/winrm-protocol/defeating-laps.md): NetExec vs LAPS
- [Obtaining Credentials](https://www.netexec.wiki/winrm-protocol/obtaining-credentials.md)
- [Dump SAM](https://www.netexec.wiki/winrm-protocol/obtaining-credentials/dump-sam.md)
- [Dump LSA](https://www.netexec.wiki/winrm-protocol/obtaining-credentials/dump-lsa.md)
- [Dump DPAPI](https://www.netexec.wiki/winrm-protocol/obtaining-credentials/dump-dpapi.md): Dump DPAPI credentials using NetExec