{"version":1,"pages":[{"id":"8Z2Mb7aPpFaDxzzvMbpD","title":"Welcome","pathname":"/","siteSpaceId":"sitesp_NVMNG","description":""},{"id":"n5ZdRN3cjOjiiADDwMX4","title":"News","pathname":"/news","siteSpaceId":"sitesp_NVMNG","description":""},{"id":"xmPYYk5A3p1AGWxafIvn","title":"v1.0.0 Release!","pathname":"/news/v1.0.0-release","siteSpaceId":"sitesp_NVMNG","emoji":"1f577","description":"A New Beginning","breadcrumbs":[{"label":"News"}]},{"id":"BHRGaeFZ0kJaKgR1e8iu","title":"v1.1.0 - nxc4u","pathname":"/news/v1.1.0-nxc4u","siteSpaceId":"sitesp_NVMNG","emoji":"1f527","description":"NetExec v1.1.0 feature rundown","breadcrumbs":[{"label":"News"}]},{"id":"WKTSDRsbkdA2Z3aLSZF8","title":"v1.2.0 - ItsAlwaysDNS","pathname":"/news/v1.2.0-itsalwaysdns","siteSpaceId":"sitesp_NVMNG","emoji":"1f4e1","description":"NetExec v1.2.0 feature rundown","breadcrumbs":[{"label":"News"}]},{"id":"SKU8cweDf8RgF7hoLdbK","title":"v1.3.0 - NeedForSpeed","pathname":"/news/v1.3.0-needforspeed","siteSpaceId":"sitesp_NVMNG","emoji":"1f3ce","description":"","breadcrumbs":[{"label":"News"}]},{"id":"6lt1yRTKx57MxjxorHdB","title":"v1.4.0 - SmoothOperator","pathname":"/news/v1.4.0-smoothoperator","siteSpaceId":"sitesp_NVMNG","emoji":"1f9c8","description":"","breadcrumbs":[{"label":"News"}]},{"id":"bwCkgqjCY0HkVpNIONSl","title":"Logo & Banner","pathname":"/logo-and-banner","siteSpaceId":"sitesp_NVMNG","description":""},{"id":"iIhhagSMDCVvIxv8JRMH","title":"NetExec Lab","pathname":"/netexec-lab","siteSpaceId":"sitesp_NVMNG","icon":"flask-vial","description":"Lab build for CTF and Workshop"},{"id":"SaZdBR0z2exQCTvMdXkS","title":"Installation","pathname":"/getting-started/installation","siteSpaceId":"sitesp_NVMNG","description":"NetExec installation","breadcrumbs":[{"label":"Getting Started"}]},{"id":"esdEoL0bhoEL7jv2m7AL","title":"Installation for Unix","pathname":"/getting-started/installation/installation-on-unix","siteSpaceId":"sitesp_NVMNG","emoji":"1f427","description":"","breadcrumbs":[{"label":"Getting Started"},{"label":"Installation"}]},{"id":"RQaWzeizlOuo2F0Gn0qs","title":"Installation for Windows","pathname":"/getting-started/installation/installation-on-windows","siteSpaceId":"sitesp_NVMNG","emoji":"1fa9f","description":"","breadcrumbs":[{"label":"Getting Started"},{"label":"Installation"}]},{"id":"d8xZzbxlEAqffJk2YK5a","title":"Installation for Mac","pathname":"/getting-started/installation/installation-for-mac","siteSpaceId":"sitesp_NVMNG","emoji":"1f34e","description":"","breadcrumbs":[{"label":"Getting Started"},{"label":"Installation"}]},{"id":"g8uDDimceXXEiCih6Rmo","title":"Using Docker","pathname":"/getting-started/installation/using-docker","siteSpaceId":"sitesp_NVMNG","emoji":"1f40b","description":"","breadcrumbs":[{"label":"Getting Started"},{"label":"Installation"}]},{"id":"yoSAtCmW2ytsiv2A8Pth","title":"Manually building the binary","pathname":"/getting-started/installation/manually-building-the-binary","siteSpaceId":"sitesp_NVMNG","emoji":"1f6e0","description":"If you want to build the standalone binary yourself, here is a tutorial for you","breadcrumbs":[{"label":"Getting Started"},{"label":"Installation"}]},{"id":"gsRDcdBBHbMpSl4VVzwV","title":"Post Installation Setup","pathname":"/getting-started/installation/setting-up-tab-completion","siteSpaceId":"sitesp_NVMNG","emoji":"27a1","description":"","breadcrumbs":[{"label":"Getting Started"},{"label":"Installation"}]},{"id":"mALFDzBe86IOh8FCVdHG","title":"Selecting & Using a Protocol","pathname":"/getting-started/selecting-and-using-a-protocol","siteSpaceId":"sitesp_NVMNG","description":"Selecting & Using a Protocol on NetExec","breadcrumbs":[{"label":"Getting Started"}]},{"id":"0zwEZKoaqUaQBatnlo1d","title":"Target Formats","pathname":"/getting-started/target-formats","siteSpaceId":"sitesp_NVMNG","description":"NetExec target formats","breadcrumbs":[{"label":"Getting Started"}]},{"id":"c8XKgH1XC85KDj4w2hz2","title":"Using Credentials","pathname":"/getting-started/using-credentials","siteSpaceId":"sitesp_NVMNG","description":"Using credentials with NetExec","breadcrumbs":[{"label":"Getting Started"}]},{"id":"msCRbX9DDolJoA8JfhY7","title":"Using Kerberos","pathname":"/getting-started/using-kerberos","siteSpaceId":"sitesp_NVMNG","description":"Using Kerberos authentication with NetExec","breadcrumbs":[{"label":"Getting Started"}]},{"id":"w9U1wfbmIVVmOgTzL2G0","title":"Using Certificates","pathname":"/getting-started/using-certificates","siteSpaceId":"sitesp_NVMNG","description":"Using Certificates authentication with NetExec","breadcrumbs":[{"label":"Getting Started"}]},{"id":"lnlFl25rYMGsejsdSsFe","title":"Using Modules","pathname":"/getting-started/using-modules","siteSpaceId":"sitesp_NVMNG","description":"Using Module with NetExec","breadcrumbs":[{"label":"Getting Started"}]},{"id":"xweHn3IsfE5weg3VwxIk","title":"DNS options","pathname":"/getting-started/dns-options","siteSpaceId":"sitesp_NVMNG","description":"Configuring DNS","breadcrumbs":[{"label":"Getting Started"}]},{"id":"HMdO9GdcYTSr71ks7R08","title":"Database General Usage","pathname":"/getting-started/database-general-usage","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"Getting Started"}]},{"id":"lTTns1Lg8NuJDj8DvF0K","title":"BloodHound Integration","pathname":"/getting-started/bloodhound-integration","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"Getting Started"}]},{"id":"Q52vrFDjQyD1vmJAqzEe","title":"Audit Mode","pathname":"/getting-started/audit-mode","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"Getting Started"}]},{"id":"O4tQRiy5gxyweBU2mSn4","title":"Ignore OpSec Warnings","pathname":"/getting-started/ignore-opsec-warnings","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"Getting Started"}]},{"id":"EAGC9DKkW3pwybaV0twi","title":"Logging","pathname":"/getting-started/log-your-results","siteSpaceId":"sitesp_NVMNG","description":"Log every output and command into a file","breadcrumbs":[{"label":"Getting Started"}]},{"id":"rkDsRBUvG0dFsVN9thOO","title":"Generate hosts file","pathname":"/smb-protocol/generate-hosts-file","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"qOs4CbPorU5yN0y0L9S1","title":"Generate krb5.conf file","pathname":"/smb-protocol/generate-krb5.conf-file","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"YR0JhWX8ZLnWCWP0cgsR","title":"Generate TGT","pathname":"/smb-protocol/generate-tgt","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"VAvlfEpLWP4sin3tefg7","title":"Scan for Vulnerabilities","pathname":"/smb-protocol/scan-for-vulnerabilities","siteSpaceId":"sitesp_NVMNG","description":"Check if host is vulnerable","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"Qo5p55P2adfZSSIwWReI","title":"Enumeration","pathname":"/smb-protocol/enumeration","siteSpaceId":"sitesp_NVMNG","description":"Enumeration on NetExec","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"oLzwn1WkL4ONS7O44TIg","title":"Enumerate Hosts","pathname":"/smb-protocol/enumeration/enumerate-hosts","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"AGm4U7FoUQL13tD0Dr51","title":"Enumerate Null Sessions","pathname":"/smb-protocol/enumeration/enumerate-null-sessions","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"VrbccyScR4P5J5KCA2y2","title":"Enumerate Guest Logon","pathname":"/smb-protocol/enumeration/enumerate-guest-logon","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"C6dwOHWl5w7hKYxt69iZ","title":"Enumerate Hosts with SMB Signing Not Required","pathname":"/smb-protocol/enumeration/smb-signing-not-required","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"g6J1CPpUNU2y30FnCJI6","title":"Enumerate Active Windows Sessions","pathname":"/smb-protocol/enumeration/enumerate-active-windows-sessions","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"hg1rBHA16ZlILeKYI7kG","title":"Enumerate Logged-On Users with the Remote Registry Service","pathname":"/smb-protocol/enumeration/enumerate-logged-on-users-winreg","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"FED1LZyrCXwetgWSiRrV","title":"Enumerate Logged-On Users with the Workstation Service","pathname":"/smb-protocol/enumeration/enumerate-logged-on-users-wkssvc","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"kFP39AnIh9WCA3Apn7SN","title":"Enumerate Shares and Access","pathname":"/smb-protocol/enumeration/enumerate-shares-and-access","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"t4AoT4BwLrLHSAqzHk8M","title":"Enumerate Network Interfaces","pathname":"/smb-protocol/enumeration/enumerate-network-interfaces","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"8Snt949z3R4ShsTmzD8d","title":"Enumerate NTLMv1","pathname":"/smb-protocol/enumeration/enumerate-ntlmv1","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"eUYPN5CY78wSrvUhRdDJ","title":"Enumerate Disks","pathname":"/smb-protocol/enumeration/enumerate-disks","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"wdnItPCagCGKmM0pEh0K","title":"Enumerate Bitlocker","pathname":"/smb-protocol/enumeration/enumerate-bitlocker","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"A4OlT4ENFdKR3nnl443i","title":"Enumerate Domain Users","pathname":"/smb-protocol/enumeration/enumerate-domain-users","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"iO8laAwQcH7lXWI32Hcl","title":"Enumerate Users by Bruteforcing RID","pathname":"/smb-protocol/enumeration/enumerate-users-by-bruteforcing-rid","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"kPLPHdD8TAqDQOhHVEkm","title":"Enumerate Domain Groups","pathname":"/smb-protocol/enumeration/enumerate-domain-groups","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"SxiKrlcMjMzAkZ12EHhG","title":"Enumerate Local Groups","pathname":"/smb-protocol/enumeration/enumerate-local-groups","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"P69BclTbwSYgszJIwKXi","title":"Enumerate Domain Password Policy","pathname":"/smb-protocol/enumeration/enumerate-domain-password-policy-1","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"Zo6wIgp5SDK7qESUuJz4","title":"Enumerate Anti-Virus & EDR","pathname":"/smb-protocol/enumeration/enumerate-antivirus-edr","siteSpaceId":"sitesp_NVMNG","description":"Enumerate antivirus installed using NetExec","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"ygZht070UvWi83ioPYzy","title":"Enumerate remote processes","pathname":"/smb-protocol/enumeration/enumerate-remote-processes","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"sVmRatnqw4uJLV8g3WMv","title":"Enumerate changed lockscreen executables","pathname":"/smb-protocol/enumeration/enumerate-lockscreen-backdoors","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Detect Windows lock screen backdoors by checking FileDescriptions of accessibility binaries.","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"575awctjeMkDOsl7RelH","title":"Enumerate Primary Site Server and Distribution Point via recon6","pathname":"/smb-protocol/enumeration/enumerate-sccm-primarysiteserver-and-distributionpoint","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Enumeration"}]},{"id":"xIT57zhhaODzizh8fXxS","title":"Password Spraying","pathname":"/smb-protocol/password-spraying","siteSpaceId":"sitesp_NVMNG","description":"Using NetExec for password spraying","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"FJZNcbBLcjMVLjHHDcj9","title":"Authentication","pathname":"/smb-protocol/authentication","siteSpaceId":"sitesp_NVMNG","description":"Authentication on NetExec","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"SATNVY0ZYZcWvXKc08U2","title":"Checking Credentials (Domain)","pathname":"/smb-protocol/authentication/checking-credentials-domain","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Authentication"}]},{"id":"4DWAsuq4uHH2OwXVVlYP","title":"Checking Credentials (Local)","pathname":"/smb-protocol/authentication/checking-credentials-local","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Authentication"}]},{"id":"wV3ERtb3eOB8L0AuvVrU","title":"Delegation","pathname":"/smb-protocol/authentication/delegation","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Resource Based Constrained Delegation (RBCD) and","breadcrumbs":[{"label":"SMB protocol"},{"label":"Authentication"}]},{"id":"iuLQy7GTDTsV7yU2cXy6","title":"Command Execution","pathname":"/smb-protocol/command-execution","siteSpaceId":"sitesp_NVMNG","description":"Command execution on NetExec","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"HpmRratJyWwQTaEyJOu7","title":"Executing Remote Commands","pathname":"/smb-protocol/command-execution/execute-remote-command","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Command Execution"}]},{"id":"ZAjaVuJclsPueBfAOyoQ","title":"Process Injection (pi module)","pathname":"/smb-protocol/command-execution/execute-remote-command/process-injection-pi-module","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Command Execution"},{"label":"Executing Remote Commands"}]},{"id":"35p7HjgMNJPuWLoYPC9x","title":"Getting Shells 101","pathname":"/smb-protocol/command-execution/getting-shells-101","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Command Execution"}]},{"id":"kLP3pJxntzTBgWaCwFHZ","title":"Spidering Shares","pathname":"/smb-protocol/spidering-shares","siteSpaceId":"sitesp_NVMNG","description":"Spidering shares with NetExec","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"ysataYmBImi8kjaA1GYt","title":"Get and Put Files","pathname":"/smb-protocol/get-and-put-files","siteSpaceId":"sitesp_NVMNG","description":"Get a remote file or send a remote file using NetExec","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"UorGhxcmaRCopSfMF3Uz","title":"Obtaining Credentials","pathname":"/smb-protocol/obtaining-credentials","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"nW5oh2YobVtkxXedfelm","title":"Dump SAM","pathname":"/smb-protocol/obtaining-credentials/dump-sam","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"RLZXRQEzk0325mU67rJx","title":"Dump LSA","pathname":"/smb-protocol/obtaining-credentials/dump-lsa","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"MLoMr42zdV3kLBRsgeEm","title":"Dump NTDS.dit","pathname":"/smb-protocol/obtaining-credentials/dump-ntds.dit","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"hSZuT3zhIWNCx3OXxiM9","title":"Dump LSASS","pathname":"/smb-protocol/obtaining-credentials/dump-lsass","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"zi0AXcWS6lLAHalmAXJG","title":"Dump DPAPI","pathname":"/smb-protocol/obtaining-credentials/dump-dpapi","siteSpaceId":"sitesp_NVMNG","description":"Dump DPAPI credentials using NetExec","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"HmIC6m1kKNNCJ4HKyvrX","title":"Dump with BackupOperator Priv","pathname":"/smb-protocol/obtaining-credentials/dump-backupop","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"QsePx8i6giajfjp4WW1k","title":"Dump SCCM","pathname":"/smb-protocol/obtaining-credentials/dump-sccm","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"8QYrqZoJZ3G7vx0sEM0K","title":"Dump Token Broker Cache","pathname":"/smb-protocol/obtaining-credentials/dump-token-broker-cache","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Dump access token for Azure and Microsoft 365 from Token Broker Cache.","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"om9XVnPSUReSNEbyXx11","title":"Dump WIFI password","pathname":"/smb-protocol/obtaining-credentials/dump-wifi-password","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"GhObCHlFwsPV06KGovDC","title":"Dump KeePass","pathname":"/smb-protocol/obtaining-credentials/dump-keepass","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"ABkFI8mHO2JBvxeJcTvl","title":"Dump Veeam","pathname":"/smb-protocol/obtaining-credentials/dump-veeam","siteSpaceId":"sitesp_NVMNG","description":"Dump passwords used by Veeam for backup jobs","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"qem1BD9jRbmh66TrPeQM","title":"Dump WinSCP","pathname":"/smb-protocol/obtaining-credentials/dump-winscp","siteSpaceId":"sitesp_NVMNG","description":"Dump WinSCP Credentials stored in the registry or local files","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"oj6YENUoHyoIs4349bKa","title":"Dump PuTTY","pathname":"/smb-protocol/obtaining-credentials/dump-putty","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Dump private Keys stored for authentication or stored proxy credentials","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"Kyjlt7qv0I7ImSGh2zHX","title":"Dump VNC","pathname":"/smb-protocol/obtaining-credentials/dump-vnc","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Dump VNC password from RealVNC or TightVNC","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"zgCKHn7c8sX4hbZMjzAY","title":"Dump mRemoteNG","pathname":"/smb-protocol/obtaining-credentials/dump-mremoteng","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Dump mRemoteNG stored credentials","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"Zcgi1B71RWNde5eQyKMR","title":"Dump Notepad","pathname":"/smb-protocol/obtaining-credentials/dump-notepad","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Dump unsaved Notepad documents","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"M1ByckEd4QWsHPczDGnC","title":"Dump Notepad++","pathname":"/smb-protocol/obtaining-credentials/dump-notepad++","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Dump Notepad++ unsaved documents","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"y08pLHZoX9UMKNoPIeCi","title":"Dump Remote Desktop Credential Manager","pathname":"/smb-protocol/obtaining-credentials/dump-rdcman","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Dump Remote Desktop Connection Manager credentials","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"sJHEp32VYjzXYsHFH0AY","title":"Dump Event Log Creds(4688)","pathname":"/smb-protocol/obtaining-credentials/eventlog-creds","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"SMB protocol"},{"label":"Obtaining Credentials"}]},{"id":"tAZlu1slv7BXYizv55wS","title":"Defeating LAPS","pathname":"/smb-protocol/defeating-laps","siteSpaceId":"sitesp_NVMNG","description":"NetExec vs LAPS","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"J5fZJ706dkdBhJ3HlPOA","title":"Checking for Spooler & WebDav","pathname":"/smb-protocol/spooler-webdav-running","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"uvBA0PFSGVjtLfbm0Utv","title":"Steal Microsoft Teams Cookies","pathname":"/smb-protocol/steal-microsoft-teams-cookies","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"RM8HrzSYnhAHOqDQhNpL","title":"Impersonate logged-on Users","pathname":"/smb-protocol/impersonate-logged-on-users","siteSpaceId":"sitesp_NVMNG","description":"Use Sessions from logged-on Users to execute arbitrary commands using schtask_as","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"NnrryE8LBQkaDvW0fv8p","title":"Change User Password","pathname":"/smb-protocol/change-user-password","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"8iMekMv9lzekH0Eif27s","title":"Modify Group","pathname":"/smb-protocol/modify-group","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"t7Lht4bemSnad78e65Qq","title":"Dump User Local Security Questions","pathname":"/smb-protocol/dump-user-local-security-questions","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SMB protocol"}]},{"id":"H0zBRtaKCfBoMz5m41qY","title":"Authentication","pathname":"/ldap-protocol/authentication","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"f4aiHlZ6Dd1dGb2g0ZhP","title":"Enumerate Domain Users","pathname":"/ldap-protocol/enumerate-users","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"ijR2pRxzW2ZiVTGJB4Ow","title":"Enumerate Domain Groups","pathname":"/ldap-protocol/enumerate-group-members","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"YCXpxoQtsD7WMf3TzlP4","title":"Query LDAP","pathname":"/ldap-protocol/query-ldap","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"An alternative to ldapsearch","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"7kQNCxGD2TEVfdPmJEOr","title":"ASREPRoast","pathname":"/ldap-protocol/asreproast","siteSpaceId":"sitesp_NVMNG","description":"Retrieve the Kerberos 5 AS-REP etype 23 hash of users without Kerberos pre-authentication required","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"kxVCOB6UGLBu1JZmONB3","title":"Find Domain SID","pathname":"/ldap-protocol/find-domain-sid","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"MeXjfM0rVJxsgPipcXr7","title":"Kerberoasting","pathname":"/ldap-protocol/kerberoasting","siteSpaceId":"sitesp_NVMNG","description":"Retrieve the Kerberos 5 TGS-REP etype 23 hash using Kerberoasting","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"yGe9wV7bMB0cDHOv9rnW","title":"Find Misconfigured Delegation","pathname":"/ldap-protocol/find-misconfigured-delegation","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"Ykd9GKTxGdCs77XU6aPY","title":"Unconstrained Delegation","pathname":"/ldap-protocol/unconstrained-delegation","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"PD8WYSvHlzwIcR8ErJgM","title":"Admin Count","pathname":"/ldap-protocol/admin-count","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"MBBrP0w4ySQ2SqfhTstG","title":"Machine Account Quota","pathname":"/ldap-protocol/machine-account-quota","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"Idb5tpra6tI2IXAQv1RI","title":"Get User Descriptions","pathname":"/ldap-protocol/get-user-descriptions","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"4M5k3CINPqKxYQJh4C4W","title":"Dump gMSA","pathname":"/ldap-protocol/dump-gmsa","siteSpaceId":"sitesp_NVMNG","description":"Extract gmsa credentials accounts","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"G6PasQm4Ee3AInnptLFn","title":"Pre2k Computer Account Abuse","pathname":"/ldap-protocol/pre2k","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"24qbZ6duGVkjvoGBbq2q","title":"Exploit ESC8 (ADCS)","pathname":"/ldap-protocol/exploit-esc8-adcs","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"KsJbpY93G9bKZT6BqK6Q","title":"Extract Subnet","pathname":"/ldap-protocol/extract-subnet","siteSpaceId":"sitesp_NVMNG","description":"Extract subnet over an active directory environment","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"aKeTtlLWlOduW9Ip9JXU","title":"Check LDAP Signing","pathname":"/ldap-protocol/check-ldap-signing","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"P7LLdnAXCHITnmiNI4Uv","title":"Read DACL Rights","pathname":"/ldap-protocol/read-dacl-right","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"pRWCuGkMfTJ7STIfO6Of","title":"Extract gMSA Secrets","pathname":"/ldap-protocol/extract-gmsa-secrets","siteSpaceId":"sitesp_NVMNG","description":"Convert gSAM id, convert gmsa lsa to ntlm ...","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"sNteUzyArvUGdplmWF7o","title":"Bloodhound Ingestor","pathname":"/ldap-protocol/bloodhound-ingestor","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"z679dON8MoeWLTy7wA2m","title":"List DC IP / Enum Trust","pathname":"/ldap-protocol/dc-list","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"List DC","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"9O0KaESbr5QR4SbY3WSM","title":"Abuse Domain Trust: Raisechild","pathname":"/ldap-protocol/raisechild","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"shqviiqyVuw0WIHiypGy","title":"Enumerate Domain Trusts","pathname":"/ldap-protocol/enumerate-trusts","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"YaIiaBxWHOc3xHmUmlHX","title":"Enumerate SCCM","pathname":"/ldap-protocol/enumerate-sccm","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"ZHWBzZd5kEPpSGljVpA2","title":"Enumerate Entra ID","pathname":"/ldap-protocol/enumerate-entra-id","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Find the Entra ID synchronization server","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"TPTT3AVLtQKLSrlQqr2M","title":"Dump PSO","pathname":"/ldap-protocol/dump-pso","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"UBUTbkalk3XjK9WYrm1S","title":"Enumerate scriptPath","pathname":"/ldap-protocol/get-scriptpath","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"dZlFpMX521Ud4HZqDeU5","title":"Enumerate Unsecure DNS Zones","pathname":"/ldap-protocol/enumerate-unsecure-dns-zones","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"LDAP protocol"}]},{"id":"DFWgoiVrfwdOuWNbMdsY","title":"Password Spraying","pathname":"/winrm-protocol/password-spraying","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"WINRM protocol"}]},{"id":"HRjXe0Z6t01oh7dlZLSF","title":"Authentication","pathname":"/winrm-protocol/authentication","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"WINRM protocol"}]},{"id":"tofLPzUDiKtZwlc9ULUg","title":"Command Execution","pathname":"/winrm-protocol/command-execution","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"WINRM protocol"}]},{"id":"ngptj9LwQWWVOgDv5SNC","title":"Defeating LAPS","pathname":"/winrm-protocol/defeating-laps","siteSpaceId":"sitesp_NVMNG","description":"NetExec vs LAPS","breadcrumbs":[{"label":"WINRM protocol"}]},{"id":"j2N97BKJbJ1cdpSrDc6f","title":"Obtaining Credentials","pathname":"/winrm-protocol/obtaining-credentials","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"WINRM protocol"}]},{"id":"esLMPAOErpab2MBolzpN","title":"Dump SAM","pathname":"/winrm-protocol/obtaining-credentials/dump-sam","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"WINRM protocol"},{"label":"Obtaining Credentials"}]},{"id":"ex6HTAzMjQ4vPBcBwweP","title":"Dump LSA","pathname":"/winrm-protocol/obtaining-credentials/dump-lsa","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"WINRM protocol"},{"label":"Obtaining Credentials"}]},{"id":"Nrm1jvg1oGjiokzvV8WI","title":"Dump DPAPI","pathname":"/winrm-protocol/obtaining-credentials/dump-dpapi","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Dump DPAPI credentials using NetExec","breadcrumbs":[{"label":"WINRM protocol"},{"label":"Obtaining Credentials"}]},{"id":"ysRsADqyEr6W7pAnpuC3","title":"Enumeration","pathname":"/mssql-protocol/enumeration","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"MSSQL protocol"}]},{"id":"yONDXcGRTjIRDk9oLjrs","title":"Enumerating encryption settings","pathname":"/mssql-protocol/enumeration/enumerating-encryption-settings","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"MSSQL protocol"},{"label":"Enumeration"}]},{"id":"oZm2hDCxxdCJW5WY1jVR","title":"Enumerating Channel Binding configuration","pathname":"/mssql-protocol/enumeration/enumerating-channel-binding-configuration","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"MSSQL protocol"},{"label":"Enumeration"}]},{"id":"8BpxmXPHUrdqtMZNUbTZ","title":"Password Spraying","pathname":"/mssql-protocol/mssql-passwordspray","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"MSSQL protocol"}]},{"id":"htjLOUuO4EctgvvvXxzK","title":"Authentication","pathname":"/mssql-protocol/authentication","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"MSSQL protocol"}]},{"id":"04CTi7lOpJ6lTKbTVJd4","title":"MSSQL PrivEsc","pathname":"/mssql-protocol/mssql-privesc","siteSpaceId":"sitesp_NVMNG","description":"Module to privesc from standard user to DBA","breadcrumbs":[{"label":"MSSQL protocol"}]},{"id":"TyYoZ97vEBwq8U5TojII","title":"MSSQL Command Execution","pathname":"/mssql-protocol/mssql-command","siteSpaceId":"sitesp_NVMNG","description":"Execute MSSQL command using NetExec","breadcrumbs":[{"label":"MSSQL protocol"}]},{"id":"iHKAUhpw3uC3Lt0acj3V","title":"MSSQL Upload & Download","pathname":"/mssql-protocol/mssql-upload-download","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"MSSQL protocol"}]},{"id":"LeTUCoaiXMu0w9BB8z9B","title":"Execute via xp_cmdshell","pathname":"/mssql-protocol/windows-command","siteSpaceId":"sitesp_NVMNG","description":"Execute Windows command using NetExec","breadcrumbs":[{"label":"MSSQL protocol"}]},{"id":"VdpbWEG9KSHyTTaZzGfr","title":"Enumerate Users by Bruteforcing RID","pathname":"/mssql-protocol/enumerate-users-by-bruteforcing-rid","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"MSSQL protocol"}]},{"id":"RrQr3BHAP6jDCm3zBneX","title":"MSSQL Linked Servers","pathname":"/mssql-protocol/mssql-linked-servers","siteSpaceId":"sitesp_NVMNG","description":"Discover and execute MSSQL queries and system commands on linked MSSQL servers using NetExec","breadcrumbs":[{"label":"MSSQL protocol"}]},{"id":"Rlcq3rWtqcQ3Zmsq7Jtg","title":"Password Spraying","pathname":"/ssh-protocol/password-spraying","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SSH protocol"}]},{"id":"68LJS7cSndN645J33uL5","title":"Authentication","pathname":"/ssh-protocol/authentication","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SSH protocol"}]},{"id":"PPs86v58oEzhiNcBMycm","title":"Command Execution","pathname":"/ssh-protocol/command-execution","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"SSH protocol"}]},{"id":"DiwYsLFZxBLhIWSXd7vh","title":"Get and Put Files","pathname":"/ssh-protocol/get-and-put-files","siteSpaceId":"sitesp_NVMNG","description":"Get a remote file or send a remote file using NetExec","breadcrumbs":[{"label":"SSH protocol"}]},{"id":"5U2HdktJY87xqq5pnduo","title":"Password Spraying","pathname":"/ftp-protocol/password-spraying","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"FTP protocol"}]},{"id":"VO7qIE9dcxnZeWcwrwlQ","title":"File Listing, etc","pathname":"/ftp-protocol/file-listing-etc","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"FTP protocol"}]},{"id":"pgF1dOQOcQmcFW9Qa7Qr","title":"File Upload & Download","pathname":"/ftp-protocol/get-and-put-files","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"Instructions for using FTP commands to access and transfer files using NetExec.","breadcrumbs":[{"label":"FTP protocol"}]},{"id":"RQ1Cy5MOxbWso1RL2xio","title":"Password Spraying","pathname":"/rdp-protocol/password-spraying","siteSpaceId":"sitesp_NVMNG","description":"RDP password spraying using NetExec","breadcrumbs":[{"label":"RDP Protocol"}]},{"id":"at2oqhR6PNBmJHhplDeQ","title":"Screenshot (connected)","pathname":"/rdp-protocol/screenshot-connected","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"RDP Protocol"}]},{"id":"qcxTfuPLsJAqIkonEIpJ","title":"Screenshot Without NLA (not connected)","pathname":"/rdp-protocol/screenshot-without-nla-not-connected","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"RDP Protocol"}]},{"id":"OG322rcVR8CcFvmUMeaD","title":"Command Execution","pathname":"/rdp-protocol/command-execution","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"RDP Protocol"}]},{"id":"rfQ3JZfZSFbxSazUMxzA","title":"Password Spraying","pathname":"/wmi-protocol/password-spraying","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"WMI Protocol"}]},{"id":"I1xrRsXeT7iY8kOjCQrC","title":"Authentication","pathname":"/wmi-protocol/authentication","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"WMI Protocol"}]},{"id":"8wdSLYPAEzc1hAZNdCkE","title":"Command Execution","pathname":"/wmi-protocol/command-execution","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"WMI Protocol"}]},{"id":"Bqt1BGsL8z8S3OlHxwXi","title":"Enumeration","pathname":"/nfs-protocol/enumeration","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"NFS Protocol"}]},{"id":"iWxZmrn0xUMlKVuFBtth","title":"Download and Upload Files","pathname":"/nfs-protocol/download-and-upload-files","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"NFS Protocol"}]},{"id":"GJRzpIFyAj7rGAQmZhc8","title":"Chmod","pathname":"/nfs-protocol/chmod","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","breadcrumbs":[{"label":"NFS Protocol"}]},{"id":"x2od7WLrsCmof3H0NlwQ","title":"Escape to root file system","pathname":"/nfs-protocol/escape-to-root-file-system","siteSpaceId":"sitesp_NVMNG","emoji":"1f195","description":"","breadcrumbs":[{"label":"NFS Protocol"}]},{"id":"QPWFDkSy1sBnoWriVlq0","title":"Authentication","pathname":"/vnc-protocol/authentication","siteSpaceId":"sitesp_NVMNG","description":"","breadcrumbs":[{"label":"VNC Protocol"}]}]}