smbmap

Enumerate SMB shares and permissions.

KaliParrotmedium

pkg: smbmap

smbmap lists shares, read/write access and can execute commands across SMB hosts using creds or null sessions.

Syntax

smbmap -H {host} -u {user} -p {pass}

Example

smbmap -H 10.0.0.5 -u guest -p ""

Lists shares and your access level on the host.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-H <10.0.0.5>Target host.
-u <guest>Username.
-p <value>Password or hash.
-d <corp.local>Domain.
-r <C$>Recursively list a share path.
-x <whoami>Execute a command (if admin).

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

smbmap

Usage examples

smbmap -H 10.0.0.5 -u guest -p ""

List shares and access level.

smbmap -H 10.0.0.5 -u admin -p P@ss -x ipconfig

Run a command over SMB.

Advantages
  • Fast share/permission mapping
  • Command execution
Disadvantages
  • Needs SMB access
  • Noisy
Tags
#smb#shares

Official docs: smbmap

Related commands

Frequently asked questions

What is smbmap used for?
smbmap lists shares, read/write access and can execute commands across SMB hosts using creds or null sessions.
What is an example smbmap command?
A common example is: smbmap -H 10.0.0.5 -u guest -p "" — Lists shares and your access level on the host.
Is smbmap part of Kali Linux?
Yes. smbmap ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install smbmap.
What category of security tool is smbmap?
smbmap is a Password Attacks tool with a medium-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →