MITRE ATT&CKsoftware (tool)
S0488 CrackMapExec
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2020-07-17
Description
CrackMapExec, or CME, is a post-exploitation tool developed in Python and designed for penetration testing against networks. CrackMapExec collects Active Directory information to conduct lateral movement through targeted networks.
Related
Uses · MITRE ATT&CK (20)
- T1680 Local Storage Discovery technique
- T1059.001 PowerShell sub-technique
- T1003.004 LSA Secrets sub-technique
- T1069.002 Domain Groups sub-technique
- T1087.002 Domain Account sub-technique
- T1003.002 Security Account Manager sub-technique
- T1003.003 NTDS sub-technique
- T1110.001 Password Guessing sub-technique
- T1110.003 Password Spraying sub-technique
- T1550.002 Pass the Hash sub-technique
- T1053.002 At sub-technique
- T1201 Password Policy Discovery technique
- T1135 Network Share Discovery technique
- T1016 System Network Configuration Discovery technique
- T1018 Remote System Discovery technique
- T1047 Windows Management Instrumentation technique
- T1049 System Network Connections Discovery technique
- T1083 File and Directory Discovery technique
- T1110 Brute Force technique
- T1112 Modify Registry technique
References
- https://github.com/byt3bl33d3r/CrackMapExec/wiki/SMB-Command-Reference CME Github September 2018