Impacket SMBClient
Interactive SMB client written in pure Python. Drops you into a shell with shares, ls, get, put, mkdir, rm, lcd, etc. Handy when the system smbclient is acting up with NTLMv2 / signing.
- Tool
- impacket-smbclient
- Category
- Enumeration / SMB
- Platform
- linux
- Requires
- password
- Protocols
- SMB
Syntax
Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.
impacket-smbclient '<domain>/<user>:<password>@<ip>'
Credential variants
The same attack using a different authentication material.
NTLM Hash requires NTLM hash
impacket-smbclient -hashes ':<hash>' '<domain>/<user>@<ip>'
Kerberos Ticket requires Kerberos ticket
impacket-smbclient -k -no-pass '<domain>/<user>@<hostname>'
Null Session requires no credentials
impacket-smbclient '<ip>'
Examples
impacket-smbclient 'CORP/jdoe:Password123!@10.10.10.10'
impacket-smbclient -hashes ':e19ccf75ee54e06b06a5907af13cef42' 'CORP/admin@10.10.10.10'
Tags
References
Related commands
- Enum4linux-ng SMB Enumeration Next generation enum4linux for SMB enumeration
- Impacket lookupsid Brute-force the RID space against SAMR / LSARPC to enumerate domain users, groups, and…
- Impacket NetView Enumerate logged-on users and sessions on remote hosts
- Impacket SAMRDump Dump user accounts and group information via SAMR protocol
- NetExec enum_ca Module Discover Active Directory Certificate Services CA hosts on the network and grab basic CA…
- NetExec MS17-010 Check (EternalBlue) Detect MS17-010 (EternalBlue) vulnerable hosts via the SMBv1 transaction probe. Safe…
- NetExec Password Policy Enumerate Domain Password Policy
- NetExec SMB Enumerate AV Enumerate installed antivirus and security products on remote hosts