SMB Commands
22 SMB commands from the Enumeration category, each with its placeholders, supported authentication methods and upstream references.
Tools covered: enum4linux-ng, impacket-lookupsid, impacket-netview, impacket-samrdump, impacket-smbclient, nxc, rpcclient, smbclient, smbmap
- Enum4linux-ng SMB Enumeration Next generation enum4linux for SMB enumeration
- Impacket lookupsid Brute-force the RID space against SAMR / LSARPC to enumerate domain users, groups, and SIDs from a low-priv…
- Impacket NetView Enumerate logged-on users and sessions on remote hosts
- Impacket SAMRDump Dump user accounts and group information via SAMR protocol
- Impacket SMBClient Interactive SMB client written in pure Python. Drops you into a shell with shares, ls, get, put, mkdir, rm,…
- NetExec enum_ca Module Discover Active Directory Certificate Services CA hosts on the network and grab basic CA information (name,…
- NetExec MS17-010 Check (EternalBlue) Detect MS17-010 (EternalBlue) vulnerable hosts via the SMBv1 transaction probe. Safe scan only —…
- NetExec Password Policy Enumerate Domain Password Policy
- NetExec SMB Enumerate AV Enumerate installed antivirus and security products on remote hosts
- NetExec SMB Enumerate Groups Enumerate domain groups via SMB
- NetExec SMB Enumerate Users Enumerate domain users via SMB
- NetExec SMB Get Network Retrieve network interface and configuration information from remote hosts
- NetExec SMB Logged-On Users Enumerate currently logged-on users on remote hosts
- NetExec SMB RunAsPPL Check Check if LSA Protection (RunAsPPL) is enabled on remote hosts
- NetExec SMB Shares Enumerate SMB shares
- NetExec SMB Spider Spider SMB shares for files and optionally download them
- NetExec SMB UAC Status Check UAC (User Account Control) configuration on remote hosts
- NetExec spider_plus Module Recursively spider every readable share, indexing filenames, sizes, modification dates, and (optionally)…
- NetExec Zerologon Check (CVE-2020-1472) Non-destructive check for the Netlogon CVE-2020-1472 (Zerologon) vulnerability against a domain controller.…
- RPCClient Enum Domain Users Enumerate domain users via RPC using rpcclient
- SMBClient Interactive Interactive SMB client for browsing and downloading files from shares
- SMBMap Share Enumeration SMB share enumeration and access testing