oscp/Windows/Active Directory for OSCP/Initial Access/SMB Shares.md

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
┌──(kali㉿kali)-[~]
└─$ smbmap -R '\' -H 10.10.10.100 -P 445
		smbmap -R '\' -H 10.10.10.161 -P 445 -u svc-alfresco -p s3rvice
		smbmap -d active.htb -u svc_tgs -p <pass> -H <ip>
		proxychains smbclient \\\\172.16.240.83\\Windows -U 'medtech.com\joe'

┌──(kali㉿kali)-[~]
└─$ sudo smbmap -R 'Replication\active.htb\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Preferences\Groups' -H 10.10.10.100 --download 'Replication\active.htb\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Preferences\Groups\Groups.xml'


crackmapexec smb <ip> -u <user> -p <pass>--shares
# Reading shares with authenticated User and Pass.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~