Enumerating SMB

Nmap

• Run nmap to find out if there are any SMB shares

Found SMB share on port 139

Metasploit

• Use msfconsole to run Metasploit and find smb_version module

Metasploit smb_version module

SMB Version Results

SMBclient

• Attempt to connect to SMB share

• -L will list out the files

• From this we see there are two file shares - IPC and ADMIN

Connection attempt to ADMIN$