nxc_winrm

MCP tool from Sec Netexec MCP by schwarztim

WinRM remote management for authentication testing, cmd/PowerShell execution, and credential dumping.

How to use it

Project documentation lists nxc_winrm for the Sec Netexec MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), then check which tools your installed version makes available. Tool availability can depend on configuration and credentials. A server handshake does not verify this tool’s behavior. See the full listing for setup details.

Install Sec Netexec MCP

$node /path/to/sec-netexec-mcp/dist/index.js

FULL SEC NETEXEC MCP LISTING

Other tools in Sec Netexec MCP (11)

nxc_database

Query the NetExec credential database for stored hosts and credentials.

nxc_ldap

LDAP/Active Directory operations including user/group/computer enumeration, Kerberoasting, ASREPRoast, BloodHound collection, and trust enumeration.

nxc_modules

List and query available NetExec modules for each protocol.

nxc_mssql

SQL Server operations including queries, xpcmdshell execution, and login enumeration.

nxc_raw

Execute raw NetExec commands for advanced scenarios not covered by other tools.

nxc_rdp

RDP credential validation and screenshot capture.

nxc_shares

SMB share enumeration and file operations (spider, get, put).

nxc_smb

SMB protocol operations including enumeration, share listing, user/group/session enumeration, credential dumping (SAM, LSA, NTDS), and command execution.

nxc_spray

Password spraying with configurable options including user/password lists, jitter, and continue-on-success.

nxc_ssh

SSH protocol for authentication testing, key-based auth, and remote command execution.

nxc_wmi

WMI-based command execution on Windows targets.