# TODO

We wanted to make development of this project as transparent as possible, so we've included our development TODOs in this file.

## TSCH

- [X] Clean up TSCH module
- [X] Session hijacking
- [X] Generate random name/path
- [X] Output
- [X] Add `tsch change`
- [ ] Serialize XML with default indent level?

### `tsch change`

- [ ] Add `--session` (like `tsch demand`)
- [ ] Add the option to avoid direct task start using TimeTrigger (similar to `tsch create`)

## SCMR

- [X] Clean up SCMR module
- [X] add dynamic string binding support
- [X] general cleanup. Use TSCH & WMI as reference
- [ ] Output

## DCOM

- [X] Add DCOM module
- [X] MMC20.Application method
- [X] Output

## WMI

- [X] Add WMI module
- [X] Clean up WMI module
- [X] Output
- [ ] WMI `reg` subcommand - read & edit the registry
- [ ] File transfer functionality

## Other

- [X] Add proxy support - see https://github.com/oiweiwei/go-msrpc/issues/21
- [X] README
- [X] pprof integration (hidden flag(s))
- [X] Descriptions for all modules and methods
- [ ] Add SMB file transfer interface

## Bugs

- [X] (Fixed) SMB transport for SCMR module - `rpc_s_cannot_support: The requested operation is not supported.`
- [X] (Fixed) Proxy - EPM doesn't use the proxy dialer
- [X] (Fixed) Kerberos requests don't dial through proxy
- [X] (Fixed) Panic when closing nil log file
- [X] `scmr change` doesn't revert service cmdline
- [X] Fix SCMR `change` method so that dependencies field isn't permanently overwritten

## Lower Priority

- [ ] `--shell` option
- [ ] Add Go tests
- [ ] ability to specify multiple targets

### TSCH

- [ ] Add more trigger types

### SCMR

- [ ] `psexec` with PsExeSVC.exe AND NOT Impacket's RemCom build - https://sensepost.com/blog/2025/psexecing-the-right-way-and-why-zero-trust-is-mandatory/

### DCOM

- [X] ShellWindows 
- [ ] ShellBrowserWindow

### WinRM

- [ ] Add basic WinRM module - https://github.com/bryanmcnulty/winrm
    - [ ] File transfer functionality
    - [ ] Shell functionality