📂 Enumeration

1. SMB Share Enumeration

I used smbclient to list the shares available on the target machine.

Command:

smbclient -L 10.129.87.161
  • Password: Pressed Enter (Null Session)

Findings: The scan revealed a non-standard share named WorkShares.


2. Share Investigation

Accessing the WorkShares share to see what information can be retrieved.

Command:

smbclient //10.129.87.161/WorkShares

Observation: I was able to log in without provide a password.


Next Step