nxc_enum
Enumerate network services and Active Directory to discover hosts, users, shares, and authentication results via NetExec.
Instructions
Enumerate network services and AD using NetExec (successor to CrackMapExec).
Args: target: Target IP, hostname, or CIDR range. protocol: Protocol to use — smb, ldap, winrm, ssh, rdp, ftp, mssql, wmi. username: Username for authentication (optional). password: Password for authentication (redacted in logs). domain: Active Directory domain name. modules: List of NetExec modules to run (e.g. ["spider_plus", "enum_av"]). timeout: Override default timeout.
Returns: Authentication results, discovered hosts, shares, users, and module output.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"target": "<target>"
},
"name": "nxc_enum"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | ||
| target | Yes | ||
| modules | No | ||
| timeout | No | ||
| password | No | ||
| protocol | No | smb | |
| username | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||