SMB
net use * /delete
net use Z: \\ip\<drive>$ <password> /user:<user>
--script smb-protocols
--script smb-security-mode
--script smb-enum-sessions
--script smb-enum-sessions --script-args smbusername=<user>, smbpassword=<password>
--script smb-enum-shares
--script smb-os-discovery
--script smb-enum-shares --script-args smbusername=<user>, smbpassword=<password>
--script smb-enum-users --script-args smbusername=<user>, smbpassword=<password>
--script smb-server-stats --script-args smbusername=<user>, smbpassword=<password>
--script smb-enum-domains --script-args smbusername=<user>, smbpassword=<password>
--script smb-enum-groups --script-args smbusername=<user>, smbpassword=<password>
--script smb-enum-services --script-args smbusername=<user>, smbpassword=<password>
--script smb-enum-shares,smb-ls --script-args smbusername=<user>, smbpassword=<password>
smbmap -u <user> -p <password> -d <dir> -H <ip>
smbmap -u <user> -p <password> -H <ip> -x <command>
smbmap -u <user> -p <password> -H <ip> -L
smbmap -u <user> -p <password> -H <ip> -r 'C$'
smbmap -u <user> -p <password> -H <ip> --upload 'location/local' 'location/remote'
smbmap -u <user> -p <password> -H <ip> --download 'location/remote'
nmblookup -A <ip>
smbclient -L <ip> -N
smbclient //<ip>/<share> -N
rpcclient -U <user> -N <ip>
srvinfo -> rpcclient
enumdomusers -> rpcclient
lookupnames admin -> rpcclient
enumdomgroups -> rpcclient
enum4linux -o <ip>
enum4linux -U <ip>
enum4linux -S <ip>
enum4linux -G <ip>
enum4linux -i <ip>
Last updated