Skip to content

Dancing

Learn

SMB (Server Message Block)

communication protocol for providing shared access to files and printers between nodes on a network.

Server Message Block provides file sharing, network browsing, printing, and inter-process communication (IPC) over a network.

The SMB protocol relies on lower-level protocols for transport.

The Microsoft SMB protocol was often used with NetBIOS over TCP/IP (NBT) over UDP, using port numbers 137 and 138, and TCP port numbers 137 and 139.

Using the SMB protocol, an application (or the user of an application) can access files at a remote server, along with other resources such as printers. Thus, a client application can read, create, and update files on the remote server.

An SMB-enabled storage on the network is called a share

smb

Requirement

sudo apt update
sudo apt -y install samba cifs-utils

Pract

nmap -sV <ip>
Starting Nmap 7.92 ( https://nmap.org ) at 2022-01-12 13:05 WIB
Nmap scan report for <ip>
Host is up (0.35s latency).
Not shown: 997 closed tcp ports (conn-refused)
PORT    STATE SERVICE       VERSION
135/tcp open  msrpc         Microsoft Windows RPC
139/tcp open  netbios-ssn   Microsoft Windows netbios-ssn
445/tcp open  microsoft-ds?
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 738.24 seconds
smbclient -L <ip_target>

smbclient \\\\<ip_target>\\ADMIN$

smbclient \\\\<ip_target>\\WorkShares

cd James.P

get flag.txt