crackmapexec / cme / netexec / nxc

Post-exploitation Swiss-Army knife for AD / SMB / WinRM. Authorized testing only. crackmapexec is superseded by netexec (nxc) in current Kali.

$ nxc smb 10.0.0.0/24 -u operator -p 'S3cret!'
$ nxc smb dc.corp.local -u operator -H :NTLMHASH --shares
$ nxc winrm host -u operator -p pass -x 'whoami'