githubEdit

List guess access on SMB share

Tools: enum4linux , smbmap , smbclient , CrackMapExec/Netexec

Commands:

enum4linux -a -u "" -p "" DC_IP && enum4linux -a -u "guest" -p "" DC_IP (Null session and guest access enumeration)

smbmap -u "" -p "" -P 445 -H DC_IP && smbmap -u "guest" -p "" -P 445 -H DC_IP

smbclient-U '%' -L //DC_IP && smbclient -U 'guest%' -L //DC_IP

netexec smb IP -u '' -p '' (Null session)

netexec smb IP -u 'a' -p '' (Anonymous logon)

Last updated