Post

NetBIOS, SMB

Posted
By George Banu
1 min read
  • list SMB shares
    1
2

    nmap --script "safe or smb-enum-*" -p 139,445 $IP -oN recon/nmap.smb_enum
smbmap -H return.local -u svc-printer -p "1edFg43012\!\!" -r
  • enumeration
    1
2
3
4

    enum4linux -avA $IP -u user -p pass > recon/enum_4_linux
nmblookup -A $IP
nbtscan 192.168.10.0/24 # Discover Windows Servers on a subnet
nmap --script=smb-enum-shares --script-args smbusername=$username,smbpassword=$password -p 139,445
  • check vulns
    1

    nmap --script smb-vuln* -p 139,445 $IP -oN recon/nmap.smb_vuln
  • list shares
    1
2
3

    smbclient -N -L \\\\$IP
smbclient -U 'user%passwd' -L //$IP
smbclient -N //$IP/share
Security Notes, Pentesting Cheatsheets, Ports Enumeration
enumeration attacks
This post is licensed under CC BY 4.0 by the author.