smbclientng 2.0

smbclient-ng, a fast and user friendly way to interact with SMB shares.

smbclient-ng, a fast and user friendly way to interact with SMB shares.

Features

• bat: Pretty prints the contents of a file. Syntax: bat <file>
• cat: Get the contents of a file. Syntax: cat <file>
• cd: Change the current working directory. Syntax: cd <directory>
• close: Closes the SMB connection to the remote machine. Syntax: close
• connect: Connect to the remote machine (useful if connection timed out). Syntax: connect
• dir: List the contents of the current working directory. Syntax: dir
• exit: Exits the smbclient-ng script. Syntax: exit
• get: Get a remote file. Syntax: get [-r] <directory or file>
• help: Displays this help message. Syntax: help
• info: Get information about the server and or the share. Syntax: info [server|share]
• lbat: Pretty prints the contents of a local file. Syntax: lbat <file>
• lcat: Print the contents of a local file. Syntax: lcat <file>
• lcd: Changes the current local directory. Syntax: lcd <directory>
• lcp: Create a copy of a local file. Syntax: lcp <srcfile> <dstfile>
• lls: Lists the contents of the current local directory. Syntax: lls
• lmkdir: Creates a new local directory. Syntax: lmkdir <directory>
• lpwd: Shows the current local directory. Syntax: lpwd
• lrename: Renames a local file. Syntax: lrename <oldfilename> <newfilename>
• lrm: Removes a local file. Syntax: lrm <file>
• lrmdir: Removes a local directory. Syntax: lrmdir <directory>
• ls: List the contents of the current remote working directory. Syntax: ls
• ltree: Displays a tree view of the local directories. Syntax: ltree [directory]
• mkdir: Creates a new remote directory. Syntax: mkdir <directory>
• module: Loads a specific module for additional functionalities. Syntax: module <name>
• mount: Creates a mount point of the remote share on the local machine. Syntax: mount <remote_path> <local_mountpoint>
• put: Put a local file or directory in a remote directory. Syntax: put [-r] <directory or file>
• reconnect: Reconnect to the remote machine (useful if connection timed out). Syntax: reconnect
• reset: Reset the TTY output, useful if it was broken after printing a binary file on stdout. Syntax: reset
• rm: Removes a remote file. Syntax: rm <file>
• rmdir: Removes a remote directory. Syntax: rmdir <directory>
• sessions: Manage the SMB sessions. Syntax: sessions [interact|create|delete|execute|list]
• shares: Lists the SMB shares served by the remote machine. Syntax: shares
• sizeof: Recursively compute the size of a folder. Syntax: sizeof [directory|file]
• tree: Displays a tree view of the remote directories. Syntax: tree [directory]
• umount: Removes a mount point of the remote share on the local machine. Syntax: umount <local_mount_point>
• use: Use a SMB share. Syntax: use <sharename>

Install

To install smbclient-ng, you can use pip. Run the following command in your terminal:

python3 -m pip install smbclientng

Demonstration

Usage

$ ./smbclient-ng.py -h
               _          _ _            _                    
 ___ _ __ ___ | |__   ___| (_) ___ _ __ | |_      _ __   __ _ 
/ __| '_ ` _ \| '_ \ / __| | |/ _ \ '_ \| __|____| '_ \ / _` |
\__ \ | | | | | |_) | (__| | |  __/ | | | ||_____| | | | (_| |
|___/_| |_| |_|_.__/ \___|_|_|\___|_| |_|\__|    |_| |_|\__, |
    by @podalirius_                               v2.0  |___/  
    
usage: smbclient-ng.py [-h] [--debug] [--no-colors] [-S startup_script] [-N] --host HOST [--port PORT]
                       [--kdcHost FQDN KDC] [-d DOMAIN] [-u USER] [--no-pass | -p [PASSWORD] | -H
                       [LMHASH:]NTHASH | --aes-key hex key] [-k]

smbclient-ng, a fast and user friendly way to interact with SMB shares.

options:
  -h, --help            show this help message and exit
  --debug               Debug mode.
  --no-colors           No colors mode.
  -S startup_script, --startup-script startup_script
                        File containing the list of commands to be typed at start of the console.
  -N, --not-interactive
                        Non interactive mode.

Target:
  --host HOST           IP address or hostname of the SMB Server to connect to.
  --port PORT           Port of the SMB Server to connect to. (default: 445)

Authentication & connection:
  --kdcHost FQDN KDC    FQDN of KDC for Kerberos.
  -d DOMAIN, --domain DOMAIN
                        (FQDN) domain to authenticate to.
  -u USER, --user USER  User to authenticate with.

  --no-pass             Don't ask for password (useful for -k).
  -p [PASSWORD], --password [PASSWORD]
                        Password to authenticate with.
  -H [LMHASH:]NTHASH, --hashes [LMHASH:]NTHASH
                        NT/LM hashes, format is LMhash:NThash.
  --aes-key hex key     AES key to use for Kerberos Authentication (128 or 256 bits).
  -k, --kerberos        Use Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target
                        parameters. If valid credentials cannot be found, it will use the ones specified in the
                        command line.

Quick win commands

• Connect to a remote SMB server:

  ./smbclient-ng.py -d "LAB" -u "Administrator" -p 'Admin123!' --host "10.0.0.201"
  

Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.