SMB

Scanning with enum4linux

Common options:

• -U: find configured users.

• -S: list file shares.

• -G: list groups and members.

• -P: list password policies.

• -i: list printers.

• -a: use all options.

Examples

Perform full scan against a target:

enum4linux -a [TARGET_IP]

Using smbclient

smbclient -L can be used to list shares on a target. Do this with:

smbclient -L //[TARGET_IP]/

Connect to share, transfer a file, verify it and exit using:

smbclient //[TARGET_IP]/[KNOWN_SHARE]
put [LOCAL_FILE_NAME] [REMOTE_FILE_NAME]
dir
quit