SMB Enumeration

1. Set the smb configurations.

locate smb.conf

vim /etc/samba/smb.conf

Insert the global settings to the configuration file.

client use spnego = no
client ntlmv2 auth = no

 

2. Enumerate the target computer and find some interestring things.

enum4linux 10.0.0.20

3. Exploit the target using Metasploit.

Detecte the SMB version.

search smb

Set the rhosts.

Identity the samba version is 2.2.1a.

4. Search the vulnerabilities locally and on the Internet.

5. Scan the exploite the target computer.

nbtscan 10.0.0.20

smbclient -L 10.0.0.20

smbclient -L "\\\\10.0.0.20\IPC$"

smbclient "\\\\10.0.0.20\IPC$"