smbclient.py [-h] [-file FILE] [-debug] [-hashes LMHASH:NTHASH] [-no-pass] [-k] [-aesKey hex key] [-dc-ip ip address] [-target-ip ip address] [-port [destination port]] target

Impacket v0.12.0.dev1+20230803.144057.e2092339 - Copyright 2023 Fortra

positional arguments:
  target                [[domain/]username[:password]@]<targetName or address>

options:
  -h, --help            show this help message and exit
  -file FILE            input file with commands to execute in the mini shell
  -debug                Turn DEBUG output ON

authentication:
  -hashes LMHASH:NTHASH
                        NTLM hashes, format is LMHASH:NTHASH
  -no-pass              don't ask for password (useful for -k)
  -k                    Use Kerberos authentication. Grabs credentials from ccache file (KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the ones specified in the command line
  -aesKey hex key       AES key to use for Kerberos Authentication (128 or 256 bits)

connection:
  -dc-ip ip address     IP Address of the domain controller. If omitted it will use the domain part (FQDN) specified in the target parameter
  -target-ip ip address
                        IP Address of the target machine. If omitted it will use whatever was specified as target. This is useful when target is the NetBIOS name and you cannot resolve it
  -port [destination port]
                        Destination port to connect to SMB Server

$ smbclient.py offsec.nl/administrator:[email protected]

Impacket v0.9.20 - Copyright 2019 SecureAuth Corporation

Type help for list of commands
# shares
ADMIN$
C$
IPC$
NETLOGON
SYSVOL
# use C$
# ls
drw-rw-rw-          0  Tue Mar 17 16:11:19 2020 $Recycle.Bin
-rw-rw-rw-     389332  Tue Mar 17 01:27:24 2020 bootmgr
-rw-rw-rw-          1  Tue Mar 17 01:27:24 2020 BOOTNXT
drw-rw-rw-          0  Mon Mar 16 16:32:03 2020 Documents and Settings
-rw-rw-rw- 1073741824  Wed Mar 18 08:56:25 2020 pagefile.sys
drw-rw-rw-          0  Mon Mar 16 17:53:03 2020 PerfLogs
drw-rw-rw-          0  Tue Mar 17 01:30:24 2020 Program Files
drw-rw-rw-          0  Tue Mar 17 01:30:24 2020 Program Files (x86)
drw-rw-rw-          0  Tue Mar 17 16:14:16 2020 ProgramData
drw-rw-rw-          0  Mon Mar 16 16:32:05 2020 Recovery
drw-rw-rw-          0  Mon Mar 16 18:09:38 2020 System Volume Information
drw-rw-rw-          0  Tue Mar 17 16:10:54 2020 Users
drw-rw-rw-          0  Tue Mar 17 16:12:50 2020 Windows
-rw-rw-rw-          8  Wed Mar 18 13:10:48 2020 __output