from @byt3bl33d3r
Buffing the Password Spraying ability attacks, which involve trying a few common passwords
across many accounts to avoid account lockout. Then User Hunting attacks method, to identify where specific users are logged in within the network. This is useful for targeting specific high-value accounts.
Upgrading this capabilities for performing Kerberos-based attacks such as AS-REP roasting and Kerberoasting.
cme kerberos <target> -u <username> -p <password> --asreproast
cme kerberos <target> -u <username> -p <password> --kerberoast
( These are the people who did the hard stuff )
This project was originally inspired by:
Unintentional contributors:
- The Empire project
- @T-S-A's smbspider script
- @ConsciousHacker's partial Python port of Invoke-obfuscation from the GreatSCT project
You are on the latest up-to-date CrackMapExec
- If you want to report a problem, open un Issue
- If you want to contribute, open a Pull Request
- If you want to discuss, open a Discussion
See the project's wiki for documentation and usage examples
- byt3bl33d3r
- cube0x0 ( for SME )
- GhostPack ( Rubeus )
Please see the installation instructions on the official wiki
git clone https://github.com/byt3n33dl3/CrackMapExec
cd CrackMapExec
python3 build_collector.py
Awesome code contributors of CrackMapExec