NetExec (nxc)

Active Directory

What it’s for

The successor to CrackMapExec: it sweeps a network to validate credentials and run actions across SMB, WinRM, LDAP and more.

Where it shines

  • Brilliant for spraying creds and triaging access at scale
  • One tool across many protocols

Where it falls down

  • Noisy
  • Account lockouts if you’re careless with spraying

My take

[EDIT ME: your one-line verdict — day-one essential, learn later, or overhyped, in your own words.]

← Back to The Armory