SMB Enumeration

$ nbtscan -r 192.168.48.0/24
$ nbtscan -r 192.168.48.23

$ crackmapexec smb <IP/range>

# Login SMB
$ crackmapexec smb <IP> -u username -p password

# Password spraying
$ crackmapexec smb <IP> -u usernames.txt -p passwords.txt --continue-on-success

# List available shares
$ crackmapexec smb <IP> -u username -p password --shares

# List all users
$ crackmapexec smb <IP> -u username -p password --users

# Get all information
$ crackmapexec smb <IP> -u username -p password --all

# Specific port
$ crackmapexec smb <IP> -u username -p password -p 445

# Include domain
$ crackmapexec smb <IP> -u username -p password -d domain

$ smbclient -L //IP
$ smbclient //server/share
$ smbclient //server/share -U <username>
$ smbclient //server/share -U domain/username

$ smbmap -H <IP>
$ smbmap -H <IP> -u <username> -p <password>
$ smbmap -H <IP> -u <username> -p <password> -d <domain>
$ smbmap -H <IP> -u <username> -p <password> -r <share>

put <file> #to upload file
get <file> #to download file

mask ""
recurse ON
prompt OFF
mget *