crackmapexec
Swiss army knife for pentesting networks
Site oficial:
https://github.com/mpgn/CrackMapExec
Empacotamento:
https://gitlab.com/kalilinux/packages/crackmapexec
Versão no Kali: 5.4.0-0kali7 · Arquiteturas: all · Comandos: 2
Metapacotes:
kali-linux-everything
Documentação do Kali:
https://www.kali.org/tools/crackmapexec/
This package is a swiss army knife for pentesting Windows/Active Directory environments. From enumerating logged on users and spidering SMB shares to executing psexec style attacks, auto-injecting Mimikatz/Shellcode/DLL's into memory using Powershell, dumping the NTDS.dit and more. The biggest improvements over the above tools are: - Pure Python script, no external tools required - Fully concurrent threading - Uses **ONLY** native WinAPI calls for discovering sessions, users, dumping SAM hashes etc... - Opsec safe (no binaries are uploaded to dump clear-text credentials, inject shellcode etc...) Additionally, a database is used to store used/dumped credentals. It also automatically correlates Admin credentials to hosts and vice-versa allowing you to easily keep track of credential sets and gain additional situational awareness in large environments.
sudo apt install crackmapexec (2.29 MB)
Dependências: python3, python3-aardwolf, python3-aioconsole, python3-bs4, python3-dsinternals, python3-impacket, python3-lsassy, python3-masky, python3-msgpack, python3-neo4j, python3-paramiko, python3-pylnk3, python3-pypsrp, python3-pywerview, python3-requests, python3-termcolor, python3-terminaltables3, python3-unicrypto, python3-xmltodict
Escolha um comando ao lado para ver a descrição e a ajuda completa.
cmedb
root@kali:~# cmedb -h [-] Unable to find config file
crackmapexec
root@kali:~# crackmapexec -h
usage: crackmapexec [-h] [-t THREADS] [--timeout TIMEOUT] [--jitter INTERVAL]
[--darrell] [--verbose]
{smb,winrm,mssql,ftp,ssh,rdp,ldap} ...
______ .______ ___ ______ __ ___ .___ ___. ___ .______ _______ ___ ___ _______ ______
/ || _ \ / \ / || |/ / | \/ | / \ | _ \ | ____|\ \ / / | ____| / |
| ,----'| |_) | / ^ \ | ,----'| ' / | \ / | / ^ \ | |_) | | |__ \ V / | |__ | ,----'
| | | / / /_\ \ | | | < | |\/| | / /_\ \ | ___/ | __| > < | __| | |
| `----.| |\ \----. / _____ \ | `----.| . \ | | | | / _____ \ | | | |____ / . \ | |____ | `----.
\______|| _| `._____|/__/ \__\ \______||__|\__\ |__| |__| /__/ \__\ | _| |_______|/__/ \__\ |_______| \______|
A swiss army knife for pentesting networks
Forged by @byt3bl33d3r and @mpgn_x64 using the powah of dank memes
Exclusive release for Porchetta Industries users
https://porchetta.industries/
Version : 5.4.0
Codename: Indestructible G0thm0g
options:
-h, --help show this help message and exit
-t THREADS set how many concurrent threads to use (default: 100)
--timeout TIMEOUT max timeout in seconds of each thread (default: None)
--jitter INTERVAL sets a random delay between each connection (default: None)
--darrell give Darrell a hand
--verbose enable verbose output
protocols:
available protocols
{smb,winrm,mssql,ftp,ssh,rdp,ldap}
smb own stuff using SMB
winrm own stuff using WINRM
mssql own stuff using MSSQL
ftp own stuff using FTP
ssh own stuff using SSH
rdp own stuff using RDP
ldap own stuff using LDAP
