ENNAENNA

CrackMapExec vs WinPwn

GitHub Stats

9.1k
Stars
3.7k
1.7k
Forks
542
67
Issues
2
2y ago
Updated
8mo ago
BSD-2-Clause
License
BSD-3-Clause
Python
Language
PowerShell

About CrackMapExec

CrackMapExec is a versatile tool for pentesting Active Directory environments, offering capabilities for SMB, LDAP, MSSQL, and WinRM enumeration and exploitation. It facilitates lateral movement and credential spraying attacks while providing a comprehensive interface for testing domain credentials and configurations. Written in Python, it is favored by security professionals for its integration with offensive security operations, allowing for efficient discovery and exploitation of network vulnerabilities.

About WinPwn

WinPwn is an automation framework for Windows internal penetration testing that combines dozens of offensive tools and techniques into a single PowerShell script. It performs automated reconnaissance (AD enumeration, network scanning, share hunting), privilege escalation checks, credential extraction (SAM, LSA, DPAPI, browser passwords), lateral movement, and persistence. WinPwn integrates with tools like Rubeus, SharpHound, Mimikatz, and Seatbelt, downloading and executing them in-memory. It is designed for situations where a tester has initial access to a Windows domain environment and needs rapid comprehensive assessment.

Platform Support

๐Ÿงlinux๐ŸŽmacos
๐ŸชŸwindows

Tags

Shared

active-directory

CrackMapExec only

smblateral-movementcredential-spraying

WinPwn only

windowsautomationinternal-pentestprivilege-escalation