NetExec

NetExec (nxc) is the maintained successor to CrackMapExec. Use it for scoped protocol checks and authenticated service inventory.

Install and check the version using the official project instructions. The current upstream release is v1.5.1; distributions may package a different version. Upstream's Linux install uses pipx install git+https://github.com/Pennyw0rth/NetExec. Release v1.5.1 includes a fix for arbitrary file write via spider_plus; the release note does not establish the full range of affected versions.

Basic use

Select the protocol, then pass only in-scope hosts and credentials supplied for the assessment:

# Check SMB authentication and enumerate accessible shares
nxc smb <host> -u <user> -p <password> --shares

# Check an authorized WinRM endpoint
nxc winrm <host> -u <user> -p <password>

Available protocol modules and options vary by installed release. Check nxc <protocol> --help before relying on a flag or module. Do not infer that a successful authentication check proves access beyond the reported protocol and host.