Log inSign up
Log inSign up
Alex Neff
715 posts
Alex Neff profile banner
@al3x_n3ff

Alex Neff

@al3x_n3ff
Pentester | Maintainer of NetExec
Germany
aneff.io
Joined September 2015
152 Following
4,946 Followers
RepliesRepliesRepostsRepostsMediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·US TIDA·Ads Info·© 2026 X Corp.
  • Pinned
    @al3x_n3ff
    Alex Neff
    @al3x_n3ff
    Dec 24, 2025
    NetExec v1.5.0 has been released!🔥 Merry Christmas everyone!🎉 It's been a very long time since the last release, so there are a TON of new features! Some of the highlights: - Built-in LDAP signing and channel binding checks - RDP command execution - certipy find integration
    NetExec v1.5.0 has been released!🔥
    14
  • @al3x_n3ff
    Alex Neff
    @al3x_n3ff
    Sep 25
    The AD Grave: Tombstoned objects🪦 If the AD Recycle Bin is enabled, objects are moved to the "Deleted Objects" container if they are "deleted". With the new "tombstone" NetExec module, you can query and restore such objects (given you have the privs). Made by Fabrizzio🚀
    List, delete and restore AD objects using the tombstone NetExec module.
    5
  • @al3x_n3ff
    Alex Neff
    @al3x_n3ff
    Sep 14
    ItsNotAlwaysSMB: DPAPI in other protocols🔥 SMB is monitored closely nowadays, stopping attacks like looting DPAPI secrets. Thanks to @_zblurx, NetExec got a huge upgrade, extending DPAPI credential dumping to other protocols such as WMI, WinRM and MSSQL and various modules🔑
    Dumping DPAPI secrets via WinRM, MSSQL and WMI
    Dump various credentials using DPLoot
    4
  • @al3x_n3ff
    Alex Neff
    @al3x_n3ff
    Sep 6
    Are you (like me) constantly running into your own Responder? The days are finally over!🚀 @Defte_ and I finally finished up a PR by bdrogja that let's you define exclusions such as "yourself". You can also exclude entire ranges or IPv6 addresses (if anyone uses those lol).
    Exclude yourself or IP (ranges) when using NetExec
    2
  • @al3x_n3ff
    Alex Neff
    @al3x_n3ff
    Sep 2
    Did anyone say Shadow Credentials?🔑 A common alternative to RBCD is to add a certificate to a computer acc. However, inspecting or removing them later on was not possible with NetExec so far. Heavily inspired by pyWhisker, I wrote a module to interact with these Shadow Creds
    Manipulating Shadow Credentials using NetExec
    2