Where Does NetExec Store Data and Logs?
NetExec .nxc directory on Linux with workspaces, hosts database and logs.
Last updated
NetExec keeps workspaces, credential caches, host databases and logs in an .nxc directory in your home folder. Each workspace isolates an engagement's hosts, shares and loot.
The SQLite databases inside record every enumerated host. Copy a workspace folder to hand an engagement to a teammate with history intact.
Where NetExec stores this, by platform
~/.nxc
Holds workspaces with hosts databases, logs and loot per engagement. The default workspace carries daily use; custom ones isolate clients. Copy workspace folders with NetExec idle to migrate findings.
Frequently asked questions
Where are NetExec credentials stored?
In the workspace databases inside .nxc above, queryable with the --export function. Treat copies like password vaults.
How do I start a fresh NetExec engagement?
Create a new workspace so hosts and loot stay separate from other clients. The default workspace keeps accumulating otherwise.
Notice an outdated path? Let us know.