> ## Documentation Index
> Fetch the complete documentation index at: https://wiki.krkn.tech/llms.txt
> Use this file to discover all available pages before exploring further.

# SCCM

# sccm

Microsoft System Center Configuration Manager (SCCM / MECM) enumeration and exploitation.

***

## Usage

```text theme={null}
r4t sccm [flags]
```

> **Status**: Base command registered. Subcommands are not yet implemented.

SCCM support is planned for enumerating SCCM infrastructure via Active Directory, discovering management points, distribution points, and clients, as well as exploitation techniques such as credential extraction from the SCCM database and lateral movement via script/application deployment.

SCCM servers can currently be identified via AD SPN lookups:

```bash theme={null}
r4t ldap get spn
# or
r4t adws query --filter "(servicePrincipalName=SMS*)" --attrs samAccountName,servicePrincipalName
```