SMB Pentesting
Find and exploit SMB vulnerabilities
Enumeration
Using nmap
Using enum4linux
Using smbclient
List all available shares
Using metasploit
Exploitation
The smbclient utility and impacket library are two good utilities to exploit SMB vulnerability.
Using smbclient
Let's say we want to access an SMB share called "secret" as user "suit" on a machine with the IP 10.10.10.2 on the default port
Anonymous login with empty passwords
In general shares
Navigating through SMB
List all available files
Get multiple or single files (mget command)
Last updated