Smb Category

blog
10+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Smb blog

Filters

  • MS08-067: what is it, RCE Windows and Metasploit exploits
    networking

    MS08-067: what is it, RCE Windows and Metasploit exploits

    MS08-067: What it is, how it works, and why it's one of the most notorious Windows RCEs. Learn about Server Service, NetAPI, SMB, Metasploit, detection, and mitigations.

    Discover more Discover more
  • CredNinja: Validate SMB Credentials with NTLM Passwords and Hashes
    windows

    CredNinja: Validate SMB Credentials with NTLM Passwords and Hashes

    Use CredNinja to validate passwords and NTLM hashes via SMB, find local admin, perform Pass-the-Hash and user hunting, and reduce lockouts with stripe and delay.

    Discover more Discover more
  • smbserver.py: SMB Server for File Transfer and NTLM
    tools

    smbserver.py: SMB Server for File Transfer and NTLM

    A guide to impacket-smbserver for creating an SMB share on Kali, transferring files, registering NTLM authentication, and managing SMB2, logins, and logging.

    Discover more Discover more
  • Port 139 NetBIOS Session: Null Session, EternalBlue, and SMB Relay on AD
    networking

    Port 139 NetBIOS Session: Null Session, EternalBlue, and SMB Relay on AD

    Port 139 open? Enumerate users with null sessions, exploit MS17-010 over SMBv1, and use ntlmrelayx if signing is disabled. Chain a Domain Admin in 27 minutes.

    Discover more Discover more
  • SMBExec: Fileless Remote Execution on Windows via SMB
    tools

    SMBExec: Fileless Remote Execution on Windows via SMB

    SMBExec is a remote command execution technique over SMB 445 without dropping persistent binaries. It's a stealthier alternative to PsExec in Active Directory environments.

    Discover more Discover more
  • PsExec: Remote Command Execution via SMB in Windows Environments
    windows

    PsExec: Remote Command Execution via SMB in Windows Environments

    PsExec allows remote command execution on Windows systems via SMB. A key tool for lateral movement and remote administration.

    Discover more Discover more
  • Impacket: Python Toolkit for SMB, Kerberos and Active Directory Attacks
    tools

    Impacket: Python Toolkit for SMB, Kerberos and Active Directory Attacks

    Impacket is a Python suite for interacting with network protocols (SMB, LDAP, Kerberos, RPC) and conducting AD attacks such as DCSync and Pass-the-Hash.

    Discover more Discover more
  • SMB port 445: Enumeration, NTLM Relay, and Pass-the-Hash in Active Directory
    windows

    SMB port 445: Enumeration, NTLM Relay, and Pass-the-Hash in Active Directory

    A complete guide to SMB port 445: share enumeration, NTLM relay, pass-the-hash, and remote execution for lateral movement in Active Directory.

    Discover more Discover more
  • Smbclient: Accessing and Attacking Windows Shares
    tools

    Smbclient: Accessing and Attacking Windows Shares

    With smbclient, you can access, read, and write files to SMB shares. Learn how to use it for internal attacks, enumeration, and pivoting in AD.

    Discover more Discover more
  • rpcclient Kali Linux: SMB, AD, and SID/RID Enumeration
    tools

    rpcclient Kali Linux: SMB, AD, and SID/RID Enumeration

    Guide to rpcclient on Kali Linux to enumerate users, groups, SIDs/RIDs, trusts, password policies, and SMB shares via SAMR, LSARPC, and SRVSVC, with practical commands.

    Discover more Discover more