skills.rest
blacklanternsecurity
blacklanternsecurityOFFICIAL
Explore all skills by this author →
WebsiteGitHub

smb-enumeration

Enumerate SMB shares, test access permissions, and detect vulnerabilities on target hosts.

253|37|Updated Feb 22, 2026
Search Tags:#penetration testing#network security#enumeration#vulnerability scanning#shares#smb
One-click install
npx skills add https://github.com/blacklanternsecurity/red-run --skill smb-enumeration
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: smb-enumeration
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/network/smb-enumeration
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill smb-enumeration

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires smbclient, NetExec, enum4linux-ng, MANSPIDER, nmap, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of enumerating SMB shares, testing access, and identifying potential vulnerabilities on target systems, crucial for understanding network attack surfaces.

Core Features & Use Cases

  • Share Discovery: Lists all available SMB shares using various methods (null session, guest, authenticated).
  • Access Testing: Verifies read/write permissions for each discovered share.
  • Vulnerability Detection: Identifies SMB signing status and checks for exploits like EternalBlue.
  • Content Searching: Uses MANSPIDER to search within share contents for sensitive data.
  • Use Case: After identifying an SMB port on a target, use this Skill to quickly determine which shares are accessible, if any contain sensitive files, and if the host is vulnerable to common SMB exploits.

Quick Start

Use the smb-enumeration skill to enumerate SMB shares and test access on the target IP 10.10.10.5.

Frequently Asked Questions about smb-enumeration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate SMB shares and test access permissions on a target host?▼

SMB enumeration discovers available shares using null, guest, or authenticated sessions, and verifies read/write permissions for each share on the target host. It automates access testing to reveal exposed directories.

What is the best way to check a network target for EternalBlue and SMBGhost vulnerabilities?▼

Checking for EternalBlue and SMBGhost involves scanning the SMB service to identify signing status and detect known exploits like MS17-010 and CVE-2020-0796. This vulnerability detection identifies hosts susceptible to common remote code execution flaws.

Can I search inside SMB share contents for sensitive files during penetration testing?▼

Yes, you can search inside SMB share contents for sensitive data using MANSPIDER. It crawls accessible shares to find exposed files matching specific patterns, automating sensitive data discovery during network security assessments.

Does this SMB enumeration approach support null session and guest access scanning?▼

Yes, SMB enumeration supports null session and guest access scanning alongside authenticated sessions. It attempts multiple access methods to map shares and identify misconfigured permissions allowing unauthorized entry.

What tools are needed to detect SMB signing status and enumerate network shares?▼

Detecting SMB signing status and enumerating shares requires tools like smbclient, NetExec, enum4linux-ng, and nmap. These dependencies facilitate comprehensive share discovery, permission testing, and vulnerability scanning.

Why should I test per-share access permissions instead of just listing SMB shares?▼

Testing per-share access permissions reveals actual read and write capabilities for each exposed directory, not just share names. This identifies writable shares for payload drops or readable shares for data exfiltration.

Related Skills

Explore More Software Engineering Skills→
chainreactorschainreactors
235

gogo

Automate network reconnaissance to identify live hosts, open ports, and service fingerprints.

Official
Intermediate
hardw00thardw00t
90

network-pentest

Simulate attacker techniques across internal networks and Active Directory environments.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

smb-share-webshell

Deploy PHP, ASPX, or JSP webshells to writable SMB shares for RCE.

Official
Advanced
cybersecwomancybersecwoman
5

hunt-aspnet

Identify and exploit ASP.NET vulnerabilities like ViewState deserialization and machineKey recovery.

Community
Advanced