NetExec Enum SMB Relay List

No_CredsLinuxEnumeration

“NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks.” - https://www.netexec.wiki/. The following command will enumerate a list of SMB hosts with signing not enforced, allowing you to relay credentials to them using ntlmrelayx.py.

Command Reference:

SMB Hosts: smb_hosts.txt

Command

nxc smb smb_host.txt --gen-relay-list output.txt

References