CrackMapExec
A post-exploitation tool for pentesting Active Directory
CrackMapExec
A post-exploitation tool for pentesting Active Directory
CrackMapExec Description
It's a post-exploitation tool (e.g. Veil-Pillage, smbexec) It's meant to be the 'glue' between exploitation frameworks when pentesting Active Directory It's fully concurrent: you're able to connect, authenticate etc.. to multiple hosts at the same time It has an internal database which is used to store credentials and track users with Administrative privileges It's functionality is based on several other tools and libraries (a list of them are in the Github repo's README) It's opsec safe: everything is either run in memory, enumerated over the network using WinAPI calls or executed using built-in windows tools/features. Part 1, will cover the basics such as using credentials, dumping credentials, executing commands and using the
CrackMapExec FAQ
Common questions about CrackMapExec including features, pricing, alternatives, and user reviews.
CrackMapExec is A post-exploitation tool for pentesting Active Directory. It is a Vulnerability Management solution designed to help security teams with Post Exploitation.
