2. CrackMapExec
Description:
CrackMapExec (CME) is a post-exploitation tool designed for Active Directory environments. It helps with lateral movement, user enumeration, credential validation, and executing commands across multiple systems.
Examples:
- Enumerate Users:
- crackmapexec smb 192.168.1.0/24 -u administrator -p password
- Enumerate Users:
Explanation: Attempts to log in as administrator with the password password on all systems in the given subnet (192.168.1.0/24). Successful logins can be used for further exploitation.
- Execute Command on Multiple Machines:
- crackmapexec smb 192.168.1.0/24 -u administrator -p password -x whoami
- Execute Command on Multiple Machines:
Explanation: Executes the whoami command on all systems in the subnet where the login is successful, allowing for reconnaissance of compromised systems.