Skip to content
HackIndex.io

SMB Host Security Enumeration

1 min read Created Jan 4, 2026 Last updated May 15, 2026

Host details reveal multi-homed interfaces, AV presence, and vulnerable configs.

NetExec Security Checks

Network interfaces:

┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP --interfaces

Leaks additional IPs.

Disks and volumes:

┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP --disks

BitLocker status:

┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP -u $USER -p $PASSWORD -M bitlocker

AV/EDR products:

┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP -u $USER -p $PASSWORD -M enum_av

SCCM presence:

┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP --sccm

Processes with creds:

┌──(kali㉿kali)-[~]
└─$ nxc smb $TARGET_IP -u $USER -p $PASSWORD --tasklist

Key areas to check during host security enumeration:

  • Network interfaces and additional IPs (multi-homed hosts)
  • AV/EDR products installed on the target
  • BitLocker encryption status on volumes
  • SCCM client presence (deployment infrastructure)
  • Running processes and loaded services

For SMB signing posture, see SMB Signing Not Required Detection and NTLM Relay Conditions.

References

End of the part for OSCP · Module 3Back to the module