aboutsummaryrefslogtreecommitdiffstats
path: root/netexec/README
diff options
context:
space:
mode:
Diffstat (limited to 'netexec/README')
-rw-r--r--netexec/README29
1 files changed, 29 insertions, 0 deletions
diff --git a/netexec/README b/netexec/README
new file mode 100644
index 0000000..568bea1
--- /dev/null
+++ b/netexec/README
@@ -0,0 +1,29 @@
+NetExec (nxc) is a network service exploitation tool that helps automate
+assessing the security of large networks. It is a maintained, actively
+developed fork of CrackMapExec, supporting protocols including SMB,
+LDAP, MSSQL, SSH, WinRM, RDP, FTP, NFS and more, with modules for
+credential dumping, lateral movement, and enumeration.
+
+This package installs NetExec as a self-contained Python virtualenv
+under /opt/netexec, with its full dependency tree pip-installed from a
+pinned, vendored wheels tarball (no network access at build time). The
+console scripts nxc, netexec and nxcdb are symlinked into /usr/bin.
+
+x86_64 only. NetExec requires Python >=3.10, so this package targets
+Slackware -current (Python 3.12); it will not run on -stable
+(Python 3.9).
+
+The compiled extension modules in the virtualenv are tied to the
+build-time Python minor version. If -current bumps its Python (for
+example 3.12 to 3.13), rebuild this package against the new interpreter.
+
+Build prerequisite: the vendored wheels tarball
+(netexec-wheels-<version>.tar.gz) is generated separately with the
+mkwheels helper and hosted at packages.danix.xyz. The exact resolved
+dependency versions and hashes are recorded in requirements.txt
+(installed under /usr/doc/netexec-<version>/), kept as an audit record.
+
+Note: NetExec's git-sourced dependencies (impacket, certipy-ad,
+oscrypto, pynfsclient) pin unversioned git refs upstream. They are
+frozen at vendor time into the wheels tarball, so once built the package
+is reproducible.