Question
While performing an internal assessment, a tester uses the following command:
```
crackmapexec smb 192.168.1.0/24 -u user.txt -p Summer123@
```
Which of the following is the main purpose of the command?
- A. To perform a pass-the-hash attack over multiple endpoints within the internal network
- B. To perform common protocol scanning within the internal network
- C. To perform password spraying on internal systems Correct
- D. To execute a command in multiple endpoints at the same time
Explanation
The command tries one password (Summer123@) against every username in user.txt over SMB across the whole 192.168.1.0/24 subnet, which is password spraying. Pass-the-hash would use the -H option with an NTLM hash, command execution would use -x or -X, and the command authenticates rather than simply scanning for protocols.
