CatalogWADComs

WAD · Tool

SMBClient

5 techniquesLinux · ActiveDirectory · WindowsWADComsGPL-3.0

SMBClient-Enum-Share-Anonymous

EnumerationLinuxActiveDirectoryWindows

Smbclient is a tool used to communicate with SMB servers. The following command will connect to an SMB share `public` using anonymous login. Command Reference: Target IP: 10.10.10.1 Domain: test.local SMB Share: public 

smbclient \\\\test.local\\public -I 10.10.10.1 -N
Evidence
Upstream reference
Environment
Active Directory
Native
Enumeration
Requires
No credentials
Services
SMB

SMBClient-Enum-Share

EnumerationLinuxActiveDirectoryWindows

Smbclient is a tool used to communicate with SMB servers. The following command will connect to an SMB share `C$` using valid credentials. Command Reference: Target IP: 10.10.10.1 Domain: test.local SMB Share: C$ Username: john Password: password123 

smbclient \\\\test.local\\C$ -I 10.10.10.1 -U john password123
Evidence
Upstream reference
Environment
Active Directory
Native
Enumeration
Requires
Username, Password
Services
SMB

SMBClient-List-Share-PTH

EnumerationLinuxActiveDirectoryWindows

Smbclient is a tool used to communicate with SMB servers. The following command will list out all available shares on the target ip using user John hash on test domain. Command Reference: Target IP: 10.10.10.1 Domain: test.local Username: john Hash: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 

smbclient -L \\10.10.10.1 -U test.local/john --pw-nt-hash XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Evidence
Upstream reference
Environment
Active Directory
Native
Enumeration
Requires
Username, NTLM hash
Services
SMB

SMBClient-List-Shares-Anonymous

EnumerationLinuxActiveDirectoryWindows

Smbclient is a tool used to communicate with SMB servers. The following command will list out all available shares on the target server using anonymous login. Command Reference: Target IP: 10.10.10.1 Domain: test.local 

smbclient -L \\test.local -I 10.10.10.1 -N
Evidence
Upstream reference
Environment
Active Directory
Native
Enumeration
Requires
No credentials
Services
SMB

SMBClient-List-Shares

EnumerationLinuxActiveDirectoryWindows

Smbclient is a tool used to communicate with SMB servers. The following command will list out all available shares on the target server using valid credentials. Command Reference: Target IP: 10.10.10.1 Domain: test.local Username: john Password: password123 

smbclient -L \\test.local -I 10.10.10.1 -U john password123
Evidence
Upstream reference
Environment
Active Directory
Native
Enumeration
Requires
Username, Password
Services
SMB