Default port of SMB 139 and 445
Last updated 2 years ago
Start with a nmap scan
nmap -T4 $IP_RANGE/24 --open
After the servers with SMB services were discovered, run a more deep and detailed scan
nmap -T4 $IP -sV -sC
net use Z: \\10.0.0.1\C$ smbserver_111 /user:administrator
