killchain-compendium/Enumeration/SMB.md

SMB

SMBClient

• Use smbclient to list the share

smbclient -L //$TARGET_IP/

• The protocol might be dated, try

smbclient -L //$TARGET_IP/ --option='client min protocol=NT1'

smbmap

• Repo
• python3 -m pip install -r requirements.txt

Usage

• -x execute command on server
• -s enumerate share

smbmap -u "admin" -p "password" -H "10.10.10.10" -x 'ipconfig'