From 84a3616b030aac10f1afe6d1504a66a5ca872433 Mon Sep 17 00:00:00 2001 From: gurkenhabicht Date: Tue, 20 May 2025 13:19:42 +0200 Subject: [PATCH] cleanup --- Enumeration/SMB.md | 24 ++++++++++++++++-------- 1 file changed, 16 insertions(+), 8 deletions(-) diff --git a/Enumeration/SMB.md b/Enumeration/SMB.md index 9504987..34d2f68 100644 --- a/Enumeration/SMB.md +++ b/Enumeration/SMB.md @@ -4,24 +4,32 @@ Start your enumeration with [enum4linux](https://github.com/CiscoCXSecurity/enum ## SMBClient -* Use `smbclient` to list the share +* Use `smbclient` to list the share through an anonymous NULL session + ```sh -smbclient -L //$TARGET_IP/ -``` -* The protocol might be dated, try -```sh -smbclient -L //$TARGET_IP/ --option='client min protocol=NT1' +smbclient -L //$TARGET_IP/ -N ``` -# smbmap +* The protocol might be dated, try + +```sh +smbclient -N -L //$TARGET_IP/ --option='client min protocol=NT1' +``` + +## smbmap * [Repo](https://github.com/ShawnDEvans/smbmap.git) * `python3 -m pip install -r requirements.txt` # Usage + * `-x` execute command on server * `-s` enumerate share +```sh +smbmap -H 10.10.10.10 +``` + ```sh smbmap -u "admin" -p "password" -H "10.10.10.10" -x 'ipconfig' ``` @@ -51,7 +59,7 @@ psexec.py example.com/domain.user@example.com ## Download Directories Single files can be downloaded by any client like smbclient via `get`. -Directories can be downloaded via +Directories can be downloaded via ```sh smbget -R smb://$TARGET_IP/directory