以 bob 用户身份连接到SMB

任务

列出目标主机上可用的 SMB 共享。以 bob 用户身份连接到可用共享。连接后，访问名为“flag”的文件夹并提交 flag.txt 文件的内容。

信息

IP：10.129.42.254
密码：Welcome1

过程

┌──(root㉿HgTrojan)-[~]
└─# smbclient \\\\10.129.42.254\\users
Password for [WORKGROUP\root]:
Try "help" to get a list of possible commands.
smb: \> ls
NT_STATUS_ACCESS_DENIED listing \*
smb: \> exit
                                                                                                                         
┌──(root㉿HgTrojan)-[~]
└─# smbclient -U bob \\\\10.129.42.254\\users
Password for [WORKGROUP\bob]:
Try "help" to get a list of possible commands.
smb: \> ls
  .                                   D        0  Thu Feb 25 18:06:52 2021
  ..                                  D        0  Thu Feb 25 15:05:31 2021
  flag                                D        0  Thu Feb 25 18:09:26 2021
  bob                                 D        0  Thu Feb 25 16:42:23 2021

                4062912 blocks of size 1024. 1124564 blocks available
smb: \> cd flag\
smb: \flag\> ls
  .                                   D        0  Thu Feb 25 18:09:26 2021
  ..                                  D        0  Thu Feb 25 18:06:52 2021
  flag.txt                            N       33  Thu Feb 25 18:09:26 2021

                4062912 blocks of size 1024. 1124564 blocks available
smb: \flag\> more flag.txt 

dceece590f3284c3866305eb2473d099
/tmp/smbmore.5q5S0r (END)

Ctrl C

flag:dceece590f3284c3866305eb2473d099