smbmap

all

Enumerate samba share drives across an entire domain.

Options (2)

-u, --usernameboolean

Display SMB shares and permissions on a [H]ost, prompting for user's password or NTLM hash

Example: smbmap {{[-u|--username]}} {{username}} --prompt -H {{ip_address}}

-p, --passwordboolean

Enumerate hosts and check SMB file permissions

Example: smbmap --host-file {{path/to/file}} {{[-u|--username]}} {{username}} {{[-p|--password]}} {{password}} -q

Enumerate hosts with NULL sessions enabled and open shares

smbmap --host-file path/to/file

Display SMB shares and permissions on a [H]ost, prompting for user's password or NTLM hash

smbmap [-u|--username] username --prompt -H ip_address

Execute a shell command on a remote system

smbmap [-u|--username] username --prompt -H ip_address -x command

Enumerate hosts and check SMB file permissions

smbmap --host-file path/to/file [-u|--username] username [-p|--password] password -q

Connect to an ip or hostname through smb using a username and password

smbmap [-u|--username] username [-p|--password] password -d domain -H ip_or_hostname

Locate and download files [R]ecursively up to `n` levels depth, searching for filename pattern (`regex`), and excluding certain shares

smbmap --host-file path/to/file [-u|--username] username [-p|--password] password -q -R --depth n --exclude sharename -A filepattern

Upload file through smb using username and password

smbmap [-u|--username] username [-p|--password] password -d domain -H ip_or_hostname --upload path/to/file '/share_name/remote_filename'

Display SMB shares and recursively list directories and files, searching for file content matching a `regex`

smbmap [-u|--username] username --prompt -H ip_address -R -F pattern