ToolsFebruary 9, 20261 min readby 0xt0pus

CrackMapExec

Swiss army knife for pentesting Windows/Active Directory environments


CrackMapExec

Description

CrackMapExec (CME) is used for SMB brute forcing, credential validation, and share enumeration. It helps test multiple credentials against SMB services across networks.

Usage 1: SMB Brute Force

Brute force usernames and passwords against SMB.

Command:

crackmapexec smb 10.10.10.149 -u names.txt -p passwords.txt

Usage 2: Enumerate Shares with Brute Force

Command:

crackmapexec -u names.txt -p passwords.txt --shares 10.10.10.149