This may be (and probably is) documented elsewhere, but I just stumbled upon it today and my world as I know it has changed. /s

CrackMapExec has been a goto tool for me, but the one thing that bothers had bothered me in the past is using screenshots of CME in a report, but having to explain to a client what “Pwn3d!” meant. Not a huge deal in the grand scheme of things, but it looks a bit unprofessional (imho) in a report.

Enter the config file modification…so apparently you can modify “Pwn3d!” to a word choice of your choosing. A teammate suggested “F’d in the A” that while perhaps accurate, won’t work well in the report. Anyhow…here’s the good stuff…

Modify the following file:

~/.cme/cme.conf

From this:

[CME] workspace = default
last_used_db = smb
pwn3d_label = Pwn3d!

To this (or whatever you’d like to use):

[CME] workspace = default
last_used_db = smb
pwn3d_label = ADMIN

Either way, thanks Marcello for developing CME…it’s a great little gadget.