Enumerating SMB

Nmap

  • Run nmap to find out if there are any SMB shares

Found SMB share on port 139

Metasploit

  • Use msfconsole to run Metasploit and find smb_version module

Metasploit smb_version module
SMB Version Results

SMBclient

  • Attempt to connect to SMB share

  • -L will list out the files

  • From this we see there are two file shares - IPC and ADMIN

Connection attempt to ADMIN$
PreviousEnumerating HTTP and HTTPSNextEnumerating SSH

Last updated