CmdID

CmdID / Commands

nxc-smb

Pentest and exploit SMB servers. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Search for valid domain credentials by trying out every combination in the specified lists of usernames and passwords

nxc smb 192.168.178.2 --username path/to/usernames.txt --password path/to/passwords.txtIdentify

Search for valid credentials for local accounts instead of domain accounts

nxc smb 192.168.178.2 --username path/to/usernames.txt --password path/to/passwords.txt --local-authIdentify

Enumerate SMB shares and the specified users' access rights to them on the target hosts

nxc smb 192.168.178.0/24 --username username --password password --sharesIdentify

Enumerate network interfaces on the target hosts, performing authentication via pass-the-hash

nxc smb 192.168.178.30-45 --username username --hash NTLM_hash --interfacesIdentify

Scan the target hosts for common vulnerabilities

nxc smb path/to/target_list.txt --username '' --password '' --module zerologon --module petitpotamIdentify

Attempt to execute a command on the target hosts

nxc smb 192.168.178.2 --username username --password password -x commandIdentify