← All Kali Commands
🏰 Active Directory CrackMapExec

Pass the hash

CrackMapExec command for pass the hash. Copy the command below and use it in your terminal.

crackmapexec — terminal
┌──(kali㉿kali)-[~]
└─$ crackmapexec smb target -u user -H hash
Tool
CrackMapExec
Category
Active Directory
Purpose
Pass the hash

🛡️ Usage Tips

  • Always ensure you have proper authorization before using CrackMapExec against any target
  • Replace target with the actual IP address or hostname you are testing
  • Run this command from a Kali Linux terminal or any system with CrackMapExec installed
  • Combine with other CrackMapExec commands for more comprehensive results
  • Pipe output to a file with > output.txt for later analysis

🔗 More CrackMapExec Commands

crackmapexec smb target -u user -p pass
SMB auth test
crackmapexec smb target -u user -p pass --shares
List shares
crackmapexec smb target -u user -p pass --sam
Dump SAM
crackmapexec smb target -u user -p pass --lsa
Dump LSA
crackmapexec smb 192.168.1.0/24 -u user -p pass
Spray subnet
crackmapexec smb target -u user -p pass --ntds
Dump NTDS
crackmapexec smb target -u user -p pass --rid-brute
RID brute force
crackmapexec smb target -u user -p pass --pass-pol
Password policy
crackmapexec smb target -u user -p pass --users
Enumerate users
crackmapexec smb target -u user -p pass --groups
Enumerate groups
crackmapexec smb target -u user -p pass --local-auth
Local auth
crackmapexec smb target -u user -p pass --loggedon-users
Logged on users

🏰 Other Active Directory Tools

BloodHound Kerbrute Certipy Impacket Rubeus2 Enum4linux-ng
📚 Learn Kali Linux — Free Course