DuckWrites·Sep 2, 2025AV Enumeration with NetExecI was finishing a small lab to test Ligolo with NetExec when I found this really useful module: enum_av. The timing was perfect, since…
Mingihongkim·Mar 24, 2025⚔️ CrackMapExec is Dead — Long Live NetExec!CrackMapExec is gone — but its spirit lives on. Meet NetExec: the modern, modular, and meaner successor built for today’s red teams.A response icon2A response icon2
DuckWrites·Dec 10, 2024Own an Active Directory Domain “Thanks” to MSSQLHacking MSSQL is one of my favorite topics in pentesting, largely because of my background as a former MSSQL DBA. A misconfigured MSSQL…
DuckWrites·Nov 21, 2024NXC’s PowerShell -X Option: A Stealthy Pentesting TechniqueWhen the PowerShell -X option is used, nxc performs several behind-the-scenes actions to ensure both functionality and stealth. Let’s dig…A response icon1A response icon1
DuckWrites·Nov 13, 20246 Powerful Things You Can Do with nxc [former crackmapexec]Pentesting tools have come a long way, and nxc (formerly known as CrackMapExec) remains a favorite among cybersecurity professionals. Its…A response icon2A response icon2
DuckWrites·Oct 24, 2024Password Spraying in Active DirectoryIf you’re working within a Windows environment, DomainPasswordSpray offers a powerful alternative with some unique advantages.
Sean Nanty·Apr 16, 2024Enumerating a Corporate Network with NetExecNetExec is a powerful tool used to compromise services within a network such as:A response icon2A response icon2
Mehmetcan Topal·Jan 22, 2024Development and Implementation of the ‘pi’ SMB Module for NetExec/CrackMapExecHello everyone, I’m thrilled to introduce the ‘pi’ SMB module, I developed for NetExec/CrackMapExec, and in this blog post, I’ll delve into…
Mehmetcan Topal·Jan 2, 2024Why and How did I implement an ‘ — active-users’ LDAP feature on NetExec?Hello everyone, I would like to introduce a new LDAP feature called ‘ — active-users’ in the NetExec tool and I will explain the reasons…
Elias Escalante Jr·Apr 26, 2023Active Directory Workshop — Brute-forcing The Domain Server Using Crackmapexec (Pt.6)Active Directory