CMEDB
CrackMapExec Database
Information on hosts, users, computers and the credentials collected are stored in the CrackMapExec database located in ~/.cme/workspaces
. By default, everything we collect using CrackMapExec will be stored in the default workspace. However, we can organize the database by creating workspace.
To interact with the CMEDB type:
CME Workspaces
Creation of a Workspace
Being in the default workspace:
List all available Workspaces
Switching Workspace
When switching workspace, every information that we collect will be stored in that workspace.
Protocol Database
Every workspace is organized so there it exist one database for each protocol
To interact with a database
Protocol options
To consult the data in each database, we can use the following keywords depending of what we are looking.
Options | Command | Protocol |
---|---|---|
Displaying SMB credentials | smb, MSSQL | |
Displaying hash credentials | smb, MSSQL | |
Displaying creds plaintext | smb, MSSQL | |
Displaying computers informations | smb, MSSQL | |
Displaying shares information and permissions | smb |
Export database
We can export our data in a .csv
file.
Last updated