Cheatsheet
  • Documentation
  • Nmap
  • Ffuf
  • FTP
  • SMB
  • RPC
  • NFS
  • DNS
  • SMTP
  • IMAP / POP3
  • SNMP
  • SQL
  • Rsync
  • Certipy
  • CrackMapExec
  • Transferring Files
  • Windows Remote Management
  • Windows AV
  • Wordpress
  • Infrastructure Enumeration
  • Privilege Escalation
  • Docker Breakout
  • Shells
  • SSTI
  • XSS
  • Pivot
    • SSH Tunneling
    • Chisel
    • Ligolo-ng
    • Meterpreter
  • LDAP
  • Spray
  • Antivirus / EDR
  • Impacket
  • Bloodhound
  • Powershell
  • Kerberosting
  • Password Attacks
  • Command Injections
  • Sliver C2
  • Windows credentials
  • Windows persistance
  • VSCode Debug
Powered by GitBook
On this page
  • Smbclient
  • SMBMap
  • Crackmapexec

SMB

Smbclient

smbclient -N -L \\\\10.10.10.10\\
smbclient -L \\\\10.10.10.10\\ -U ''%''
smbclient -U 'qu35t%password1' \\\\10.10.10.10\\users
!cat file.txt

SMBMap

smbmap -H 10.10.10.10
smbmap -u qu35t -p 'Password1!' -d qu35t.pw -H 10.10.10.10
smbmap -u qu35t -p 'Password1!' -d qu35t.pw -H 10.10.10.10 -R 'Department Shares' --dir-only

Crackmapexec

cme smb 10.10.10.10 -u '' -p '' --shares
cme smb 10.10.10.10 -d DC-QU35T -u 'qu35t' -p 'password1' --shares
cme smb 10.10.10.10 -d DC-QU35T -u 'qu35t' -p 'password1' -M spider_plus
PreviousFTPNextRPC

Last updated 2 years ago