NetExec
NetExec (the maintained successor to CrackMapExec) assesses large Windows/Active Directory networks over SMB, WinRM, LDAP and other protocols.
Legal & ethical use. Credential testing against systems without permission is illegal. Use this tool only on systems, networks and data that you own or have explicit written permission to test. Unauthorised access or scanning can break computer-misuse laws (for example Pakistan's Prevention of Electronic Crimes Act, 2016, and equivalents elsewhere). Practise in your own lab or in authorised environments such as CTFs.
What it is used for
- Check which lab hosts accept given credentials
- Enumerate shares and password-policy settings in a lab domain
Key features
- Multiple protocol modules
- Credential testing with rate control
- Module system
Installation
Install with pipx as shown on netexec.wiki.
Beginner usage guide
Use only in a lab domain; begin with unauthenticated enumeration options and read module descriptions before running them.
Example commands
Run these only against your own lab or authorised targets. Placeholder addresses such as 192.0.2.x are documentation ranges.
Show help
netexec smb -hLists options for the SMB protocol module.
Keep learning
🎓 Learning path: Active Directory
References
Source verification
Last reviewed: 2026-10-27
Links checked over HTTP: 2026-10-27 07:51 UTC — official: 200, docs: 200, repo: 200
Command flags checked against the real binary netexec (1.5.1 - Yippie-Ki-Yay - Kali Linux -) on 2026-10-27.