SMB

Range Scan

Enum basics smb infos or try credentials on IP range

sudo docker run --rm -it byt3bl33d3r/crackmapexec smb 192.168.0.0/24
sudo docker run --rm -it byt3bl33d3r/crackmapexec smb 192.168.0.0/24 -u='User' -p='Password'

Recursive Download

cd $(mktemp -d)
smbclient '//1.2.3.4/SYSVOL' -U 'USER%PASSWORD'
smb: \> mask ""
smb: \> recurse ON
smb: \> prompt OFF
smb: \> cd /
smb: \> mget *
smb: \> exit