> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/enumeration/network-service-assessment-tools.md).

# 网络服务评估工具

在经过授权的服务枚举、身份验证验证以及 Windows 或 Active Directory 网络评估工作流程中使用这些工具。特定协议的方法应保留在相关服务页面中；本页面是中央目录。

## 工具

<table data-card-size="large" data-column-title-hidden data-view="cards" data-full-width="false" data-search="false"><thead><tr><th>名称</th><th>描述</th><th>官方链接</th><th data-hidden data-card-cover data-type="image">封面图片</th></tr></thead><tbody><tr><td><strong>CrackMapExec</strong></td><td>主要面向 Active Directory 和 Windows 环境的后渗透与网络评估工具。</td><td><a href="https://github.com/byt3bl33d3r/CrackMapExec">https://github.com/byt3bl33d3r/CrackMapExec</a></td><td><a href="/files/f23c1891baaa9023a234706ff9759d4da9acafae">/files/f23c1891baaa9023a234706ff9759d4da9acafae</a></td></tr><tr><td><strong>NetExec</strong></td><td>CrackMapExec 生态系统中由社区维护的后继工具，用于网络服务评估。</td><td><a href="https://github.com/Pennyw0rth/NetExec">https://github.com/Pennyw0rth/NetExec</a></td><td><a href="/files/6cdb1c0d3029f205e57bff80d0599d471e3943c5">/files/6cdb1c0d3029f205e57bff80d0599d471e3943c5</a></td></tr><tr><td><strong>Impacket</strong></td><td>用于处理 SMB、Kerberos、LDAP、MSSQL 等网络协议的 Python 工具集。</td><td><a href="https://github.com/fortra/impacket">https://github.com/fortra/impacket</a></td><td><a href="/files/6bab3e9204dd7d39c8482d4d9cd69d002c1b7d77">/files/6bab3e9204dd7d39c8482d4d9cd69d002c1b7d77</a></td></tr><tr><td><strong>rpcclient</strong></td><td>Samba 实用工具，用于在枚举过程中与 Microsoft RPC 服务交互。</td><td><a href="https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html">https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html</a></td><td><a href="/files/3e83eba64a1470ae85728b19244a7750c0d05ae8">/files/3e83eba64a1470ae85728b19244a7750c0d05ae8</a></td></tr><tr><td><strong>Hydra</strong></td><td>用于针对受支持协议进行密码审计工作流的网络登录测试工具。</td><td><a href="https://github.com/vanhauser-thc/thc-hydra">https://github.com/vanhauser-thc/thc-hydra</a></td><td><a href="/files/5c70672a4477bfc00f4a896229941fc69ab10848">/files/5c70672a4477bfc00f4a896229941fc69ab10848</a></td></tr><tr><td><strong>Kerbrute</strong></td><td>用于 Active Directory 评估的 Kerberos 用户名枚举和密码审计工具。</td><td><a href="https://github.com/ropnop/kerbrute">https://github.com/ropnop/kerbrute</a></td><td><a href="/files/11e9a7189bb261d5a7a07ac4d6147cab28d584d3">/files/11e9a7189bb261d5a7a07ac4d6147cab28d584d3</a></td></tr><tr><td><strong>snmpwalk</strong></td><td>用于查询启用 SNMP 的设备的 SNMP 枚举实用工具。</td><td><a href="https://www.net-snmp.org/docs/man/snmpwalk.html">https://www.net-snmp.org/docs/man/snmpwalk.html</a></td><td><a href="/files/98cb3d66520f273296664413cabcacc9aa2bfde8">/files/98cb3d66520f273296664413cabcacc9aa2bfde8</a></td></tr><tr><td><strong>ldapsearch</strong></td><td>用于目录枚举和验证的 LDAP 查询实用工具。</td><td><a href="https://www.openldap.org/software/man.cgi?query=ldapsearch">https://www.openldap.org/software/man.cgi?query=ldapsearch</a></td><td><a href="/files/2d47dc79aebb5a741f9a291d7e084863a5330de9">/files/2d47dc79aebb5a741f9a291d7e084863a5330de9</a></td></tr><tr><td><strong>smbclient</strong></td><td>用于列出、访问并与 SMB 共享交互的 Samba 客户端。</td><td><a href="https://www.samba.org/samba/docs/current/man-html/smbclient.1.html">https://www.samba.org/samba/docs/current/man-html/smbclient.1.html</a></td><td><a href="/files/0952e4972790c4f08c83fd66fb51dd9059cfc3ee">/files/0952e4972790c4f08c83fd66fb51dd9059cfc3ee</a></td></tr><tr><td><strong>enum4linux-ng</strong></td><td>基于 Linux 的枚举工具，用于 SMB、NetBIOS 以及 Windows 或 Samba 目标。</td><td><a href="https://github.com/cddmp/enum4linux-ng">https://github.com/cddmp/enum4linux-ng</a></td><td><a href="/files/7e6ee6de457273b7ed24f7b5094cd18d520e98d0">/files/7e6ee6de457273b7ed24f7b5094cd18d520e98d0</a></td></tr><tr><td><strong>showmount</strong></td><td>用于列出 NFS 服务器导出共享的 NFS 实用工具。</td><td><a href="https://man7.org/linux/man-pages/man8/showmount.8.html">https://man7.org/linux/man-pages/man8/showmount.8.html</a></td><td><a href="/files/f2cdcf100d341e3a8452fc6f7fb6c8792358b639">/files/f2cdcf100d341e3a8452fc6f7fb6c8792358b639</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-tools/enumeration/network-service-assessment-tools.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.