tldr/pages/common/smbmap.md

990 B

smbmap

Allow users to enumerate samba share drives across an entire domain. More information: https://github.com/ShawnDEvans/smbmap.

  • Enumerate hosts with NULL sessions enabled and open shares:

smbmap --host-file {{path/to/file}}

  • Enumerate hosts and check SMB file permissions:

smbmap --host-file {{path/to/file}} -u {{username}} -p {{password}} -q

  • Connect to an ip or hostname through smb using a username and password:

smbmap -u {{username}} -p {{password}} -d {{domain}} -H {{ip_or_hostname}}

  • Locate and download files [R]ecursively up to N levels depth, searching for filename pattern (regex), and excluding certain shares:

smbmap --host-file {{path/to/file}} -u {{username}} -p {{password}} -q -R --depth {{number}} --exclude {{sharename}} -A {{filepattern}}

  • Upload file through smb using username and password:

smbmap -u {{username}} -p {{password}} -d {{domain}} -H {{ip_or_hostname}} --upload {{path/to/file}} '{{/share_name/remote_filename}}'