Developer builds Rust-native WMI exec tool by reverse-engineering impacket byte-by-byte

A developer has documented building wmiexec from scratch in Rust as part of ADhammer, a self-described Active Directory audit and validation toolkit. The implementation required reconstructing DCOM activation, OXID resolution, and MS-WMIO object marshaling without relying on existing libraries. Rather than using impacket as a dependency, the developer treated it as a debugging reference, comparing wire-level bytes between the two implementations until a Windows domain controller accepted the output. The entire project is built on a custom DCE/RPC, NTLM, SMB2, and Kerberos stack written in Rust, with Claude Code used as an AI development assistant throughout the process.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)
Log in to join the discussion and vote.
Log in