Pennyw0rth/NetExec
NetExec
NetExec is a framework for concurrent credential spraying and remote command execution across network protocols. It provides input sanitization and command parsing to reduce injection risks, a plugin-based protocol abstraction that dispatches credentials and commands uniformly regardless of transport, and session and token lifecycle management for long-running multi-command operations. Results from concurrent executions are collected and normalized through a result aggregation pipeline.
The framework includes a concurrent job scheduler that manages worker threads for parallel execution across many hosts, and a credential spraying engine with configurable delay and lockout detection to avoid service disruption. It also automates lateral movement between hosts using discovered credentials, forming a post-exploitation toolkit for moving across networks once access is obtained.
NetExec enables remote command execution on hosts over supported network protocols without interactive logins, and provides credential validation and password spraying against network services such as SMB, SSH, and WinRM to discover valid accounts.
Features
- Password Spraying Tools - Systematically tests one password against many usernames across network services without triggering lockouts.
- Post-Exploitation and Lateral Movement - Automates moving between hosts by using discovered credentials and executing remote commands.
- Concurrent Job Schedulers - Manages a pool of worker threads for parallel execution of protocol-specific command and authentication jobs across many hosts.
- Remote Command Execution - Runs commands on remote hosts over network protocols without requiring interactive login.
- Multi-Protocol Credential Testers - Tests username and password combinations against SMB, SSH, and WinRM to discover valid login accounts.
- Credential Automators - Automates sequential credential attempts across multiple targets with configurable delay and lockout detection.
- Multi-Protocol - Tests username and password combinations against multiple network services to discover valid accounts.
- Multi-Protocol - Tests usernames and passwords against network services to discover valid login accounts.
- Post-Exploitation Toolkits - Provides capabilities for lateral movement and remote administration once valid credentials are obtained.
- Input Validation and Sanitization - Strips shell metacharacters and validates command syntax to reduce injection risks before sending to remote handlers.
- Modular Protocol Plugins - Encapsulates each network protocol behind a common plugin interface for uniform command and credential dispatch.
- Non-Blocking Socket I/O - Uses non-blocking sockets and thread-pooled I/O to saturate network throughput across hundreds of endpoints.
- Multi-Command Session Lifecycles - Maintains per-target authenticated sessions by refreshing tokens or reconnecting on expiry for long-running operations.
- Task Result Aggregation - Collects and normalises output from concurrent remote executions into a unified report with per-target status.
- Lateral Movement - Network exploitation tool for Windows Active Directory environments.
- Password and Credential Attacks - Network exploitation tool for credential dumping and service interaction.
- Password Attacks - Network service exploitation tool for credential testing and movement.
- Post Exploitation Frameworks - Modernized tool for network-wide post-exploitation.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
