SMB

We will show how we can manually and with tools gather SMB information.

Tools

---

nmap

sudo nmap -v -p 139,445 -oG nmap/smb.txt 192.168.0.1-254

nbtscan

sudo nbtscan -r 192.168.0.1/24

net

net view \\target.htb /all

smbclient

smbclient -N -L //10.10.10.33 

smbclient -L //10.10.10.33 -U cub3

smb: \> recurse on
smb: \> prompt off
smb: \> mget *

netexec

nxc smb 10.10.10.100 -u 'a' -p '' --shares

nxc smb 10.10.10.100 -u cub3 -p password --shares

nxc smb 10.10.10.100 -u cub3 -p password --pass-pol

nxc smb 10.10.10.100 -u cub3 -p password --users --rid-brute

nxcsmb 10.10.10.100 -u cub3 -p password --groups --local-groups