Skip to content

Using WinRM to scan a remote windows machine #1704

@mng-spielmann

Description

@mng-spielmann

What is not working as you expected it?
I'm trying to use WinRM to scan a one of our Windows-machines remotely. WinRM is enabled and working (i tested it from another Windows machine) but when i try to use it in conjunction with Mondoo i only get this error message:

`Enter password:
→ loaded configuration from /etc/opt/mondoo/mondoo.yml using source default
→ using service account credentials
→ discover related assets for 1 asset(s)
! winrm port 5985 is using http communication instead of https, passwords are not encrypted
x unable to create runtime for asset error="rpc error: code = Unknown desc = http response error: 401 - invalid content type" asset=
Asset: ()

error: rpc error: code = Unknown desc = http response error: 401 - invalid content type

Scanned 1 asset`

Where on the platform does it happen?
cnspec running on linux

How do we replicate the issue?
cnspec scan winrm user@ip --ask-pass

Expected behavior (i.e. solution)
cnspec should be able to login and scan the asset.

Other Comments

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions