SAMBA Jutsus

Samba Jutsus

1. nmap -p 445 --script=smb-enum-shares 10.10.10.123

This will tell you exact paths. If it says C:\etc\Development and its running on Linux, its really /etc/Development.

2. smbmap -H 10.10.10.123 | smbmap -H 10.10.10.123 -r

smbmap shows your access privileges.

3. smbclient -L \\10.10.10.123 | smbclient \\\\10.10.10.123\\Development

Good old smbclient.

4. Mounting

Try to mount if smbclient isn't working.

sudo mkdir /media/SMBShare
sudo mount //10.10.10.134/Backups /media/SMBShare/
sudo umount -f /media/SMBShare/

5. nmap -p 139, 445 -script=smb-vuln-* 10.10.10.123 -Pn

This nmap script smb-vuln-* is good for finding MS08-067 and EternalBlue.

Comments

Popular posts from this blog

Palo Alto for GNS3 CCDC Tutorial

Trace Labs Global Missing Persons CTF V

Release of CCDC ISE Manager Website