sec-netexec-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SSH_KEY | Yes | Path to SSH private key file | |
| SSH_USER | Yes | SSH username | |
| KALI_HOST | No | SSH hostname or IP for Kali machine | kali |
| SSH_TIMEOUT | No | Command timeout in seconds | 300 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| nxc_smbB | Execute NetExec SMB protocol commands for Windows enumeration, credential validation, command execution, and credential dumping. Supports pass-the-hash attacks. |
| nxc_winrmB | Execute NetExec WinRM protocol commands for remote Windows management and command execution. |
| nxc_sshA | Execute NetExec SSH protocol commands for Linux/Unix enumeration and command execution. |
| nxc_ldapB | Execute NetExec LDAP protocol commands for Active Directory enumeration, including users, groups, Kerberoasting, and BloodHound collection. |
| nxc_mssqlB | Execute NetExec MSSQL protocol commands for SQL Server enumeration and command execution. |
| nxc_rdpB | Execute NetExec RDP protocol commands for credential validation and screenshot capture. |
| nxc_modulesB | List or get information about available NetExec modules for a protocol. |
| nxc_sprayC | Perform password spraying attacks across multiple targets with configurable options. |
| nxc_sharesC | Enumerate and interact with SMB shares on target systems. |
| nxc_wmiB | Execute NetExec WMI protocol commands for Windows management and command execution. |
| nxc_rawA | Execute a raw NetExec command with full control over all arguments. Use for advanced scenarios not covered by other tools. |
| nxc_databaseC | Query the NetExec database for stored credentials and hosts. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 12 tools
Each tool targets a distinct protocol or feature (e.g., LDAP, MSSQL, SMB, spraying) with clear scope. The only potential overlap is between nxc_smb and nxc_shares, but the descriptions differentiate them well (general SMB vs. share enumeration).
All tools follow the consistent 'nxc_<protocol/feature>' pattern, using lowercase with underscores. This uniform naming convention makes the tool set predictable and easy to navigate.
With 12 tools covering major protocols (LDAP, MSSQL, RDP, SMB, SSH, WinRM, WMI) plus auxiliary features (database, modules, shares, spray, raw), the count is well-scoped for a security enumeration/execution server.
The tool set covers core NetExec protocols and common attack vectors (password spraying, credential dumping, command execution). Minor gaps exist (e.g., no explicit Kerberos or FTP tool), but the raw tool provides a fallback for advanced scenarios.