Skip to content
HackIndex logo

HackIndex

SMB
Service

SMB

SMB is a Windows file and printer sharing protocol. Attackers enumerate shares, users, and domain info, then exploit misconfigs via relay, PtH, or RCE to move laterally and exfiltrate data

:139 :445 27 guides 4 phases
1 min read Updated: Jul 13, 2026

What is SMB?

SMB (Server Message Block) is used by Windows for file and printer sharing.

Common security issues

  • Anonymous SMB shares.

  • NTLM relay and downgrade attacks.

  • SMBv1 enabled.

  • Credential harvesting via SMB.

Default ports

  • 445

  • 139

Enumeration

SMB shares, users, hosts, NetBIOS, and domain info enumeration guides

5

SMB Host Security Enumeration

Enumerate SMB hosts to identify shares, sessions, users, and misconfigurations using tools like enum4linux, smbclient, and Nmap scripts.

Jan 4, 2026 • 1 min read

SMB Null Session Enumeration

Exploit unauthenticated SMB null sessions to enumerate shares, users, groups, and domain info using tools like enum4linux, rpcclient, and smbclient.

Jan 4, 2026 • 4 min read

SMB Share Enumeration

Enumerate SMB shares using tools like smbclient, crackmapexec, and enum4linux to discover exposed network shares, permissions, and accessible files.

Jan 4, 2026 • 6 min read
SMB User and Domain Enumeration

SMB User and Domain Enumeration

Enumerate valid users and domain information from SMB shares using tools like enum4linux, rpcclient, and crackmapexec to map AD attack surfaces.

Jan 4, 2026 • 1 min read

Vulnerability Discovery

SMB vuln scans covering signing, EternalBlue, shares, and access control

13

Exploitation

SMB shells via relay, PtH, RCE exploits, and share abuse

8

EternalBlue MS17-010 – SMB RCE

Exploits the MS17-010 SMB vulnerability using EternalBlue to achieve unauthenticated remote code execution on unpatched Windows systems via port 445.

Mar 11, 2026 • 3 min read

Lateral Movement

Spray creds, dump SAM, and pivot via SMB using nxc and impacket

1

SMB Lateral Movement

Covers SMB-based lateral movement techniques including pass-the-hash, PsExec, and admin share abuse to pivot across Windows environments.

May 6, 2026 • 5 min read