SMB Host Security Enumeration
1 min read
May 15, 2026
Host details reveal multi-homed interfaces, AV presence, and vulnerable configs.
NetExec Security Checks
Network interfaces:
┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP --interfaces
Leaks additional IPs.
Disks and volumes:
┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP --disks
BitLocker status:
┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP --bitlocker
AV/EDR products:
┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP --av
SCCM presence:
┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP --sccm
Lockscreen backdoors:
┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP --lockscreen
Processes with creds:
┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP -u $USERNAME -p $PASSWORD --processes
For SMB signing posture, see SMB Signing Not Required Detection and NTLM Relay Conditions.
References
-
NetExec repositorygithub.com/Pennyw0rth/NetExec (opens in new tab)
Host configuration and AV enumeration
Was this helpful?
Your feedback helps improve this page.