(use python3)

modified/forked from this gist https://gist.github.com/jborean93/d6ff5e87f8a9f5cb215cd49826523045/ by @jborean93

install requirements: pip3 install -r requirements.txt

example usage: python3 winrm_decrypt.py -n 8bb1f8635e5708eb95aedf142054fc95 ./capture.pcap

(you can find the working example pcap inside examples, capture.pcap from HTB Uni CTF Quals 2021

or, use the password python3 winrm_decrypt.py -p password123 ./capture.pcap