crackmapexec (NetExec)

Goal: Validate credentials, enumerate shares, spray passwords, and spider SMB shares across Windows networks.

Note: CrackMapExec (cme) is officially deprecated. Modern versions are branded as NetExec (nxc). The syntax remains identical (nxc smb instead of cme smb).

1. Authentication and Protocol Flags

NetExec supports multiple protocols (smb, winrm, ldap, mssql, ssh, rdp).

• -u Username, -p Password.
• -d Domain (Use -d '' or --local-auth for local SAM accounts).
• -H Pass-The-Hash (NTLM).

# Basic SMB auth check against an IP range
nxc smb 10.10.10.0/24 -u 'user' -p 'password'