CrackMapExec

What it does

CrackMapExec automates enumeration and attacks across SMB, WinRM, MSSQL, and LDAP at scale — spraying credentials, dumping hashes, and executing commands. It's a staple of internal Active Directory assessments.

Common use cases

• •Credential spraying across a subnet to identify valid domain accounts on SMB and WinRM.
• •Enumerate domain users, shares, and group policy objects across hundreds of Windows hosts.
• •Execute remote commands on multiple machines simultaneously after gaining credentials.

Key features

• •Supports SMB, WinRM, MSSQL, LDAP, and SSH protocols in a single tool.
• •Automates pass-the-policy and credential-guessing across entire network ranges.
• •Built-in modules for LSASS dump, SAM dump, and Kerberos attack execution.
• •Outputs results in a color-coded terminal with parsed user and hash data.

Source