>_ shadow.red

SMB Enumeration with Nmap

Reconnaissance Service Enumeration linux

Run all SMB scripts

sudo nmap -sV -p 445 --script "smb*" 10.10.10.4
sudo nmap -sV -p 445 --script "smb*" --script-timeout 30s 10.10.10.4

Specific scripts

nmap -p445 --script smb-security-mode 10.10.3.21
nmap -p445 --script smb-enum-users.nse 10.10.3.21

Vulnerability scanning

nmap --script=smb-enum* --script-args=unsafe=1 -T5 $ip
nmap --script=vuln* --script-args=unsafe=1 -T5 $ip