whx
/
killchain-compendium
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

cleanup

This commit is contained in:
gurkenhabicht 2025-05-20 13:19:42 +02:00
parent d3b457a796
commit 84a3616b03
1 changed files with 16 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
Enumeration/SMB.md
View File

@ -4,24 +4,32 @@ Start your enumeration with [enum4linux](https://github.com/CiscoCXSecurity/enum
## SMBClient
* Use `smbclient` to list the share
* Use `smbclient` to list the share through an anonymous NULL session
```sh
smbclient -L //$TARGET_IP/
```
* The protocol might be dated, try
```sh
smbclient -L //$TARGET_IP/ --option='client min protocol=NT1'
smbclient -L //$TARGET_IP/ -N
```
# smbmap
* The protocol might be dated, try
```sh
smbclient -N -L //$TARGET_IP/ --option='client min protocol=NT1'
```
## smbmap
* [Repo](https://github.com/ShawnDEvans/smbmap.git)
* `python3 -m pip install -r requirements.txt`
# Usage
* `-x` execute command on server
* `-s` enumerate share
```sh
smbmap -H 10.10.10.10
```
```sh
smbmap -u "admin" -p "password" -H "10.10.10.10" -x 'ipconfig'
```
@ -51,7 +59,7 @@ psexec.py example.com/domain.user@example.com
## Download Directories
Single files can be downloaded by any client like smbclient via `get`.
Directories can be downloaded via
Directories can be downloaded via
```sh
smbget -R smb://$TARGET_IP/directory