Command Builder

Interactively check flags, fill in values, and assemble a ready-to-run command for popular security tools.

BETA: Commands provided are AI-generated and are not yet checked for validity. Use with caution and verify outputs before running them.

Network

nmap
netcat

Web

sqlmap
gobuster
nikto

Password

hashcat
hydra

Recon

whois
dig

Transfer

wget
Invoke-WebRequest
certutil
scp
rsync

Remote Access

ftp
ssh
telnet
xfreerdp3
evil-winrm

SMB / Windows

netexec
enum4linux-ng
rpcclient
smbmap
impacket-psexec
impacket-wmiexec

SMTP

smtp-user-enum

SNMP

onesixtyone
snmpwalk
braa

Database

mysql
impacket-mssqlclient

Audit

ssh-audit

netexec

↗ docs

Network execution tool for attacking and enumerating network services (successor to CrackMapExec)

smbwindowsenumerationlateral-movementactive-directory

netexec

Required

Target*

Options

smbSMB protocol— Target SMB service

winrmWinRM protocol— Target WinRM service

sshSSH protocol— Target SSH service

ldapLDAP protocol— Target LDAP service

-uUsername— Username or file of usernames

-pPassword— Password or file of passwords

-HHash (PTH)— NT hash for pass-the-hash

--sharesEnum shares— Enumerate SMB shares

--usersEnum users— Enumerate domain users

--groupsEnum groups— Enumerate domain groups

--pass-polPassword policy— Dump password policy

--samDump SAM— Dump local SAM hashes

--lsaDump LSA— Dump LSA secrets

-xExecute command— Execute a command via SMBExec

-XExecute PS command— Execute PowerShell command

--local-authLocal auth— Authenticate using local account

-dDomain— Domain name