Skip to content

SMB Client

get list of shares on target

smbclient -L //10.10.0.50/

if it was misconfigured, we can log in anonymously by simply hitting Enter at the prompt

#-U flag to specify the username (in this case a blank string) and the -N flag to specify no password
smbclient -L //10.10.0.50/ -U '' -N

connect to share name

smbclient //10.10.0.50/<sharename>

list directory

dir

download file

get example.txt

upload file

put evil_file.txt