smbclientng 1.3.1

smbclient-ng, a fast and user friendly way to interact with SMB shares.

smbclient-ng, a fast and user friendly way to interact with SMB shares.

Features

• bat: Pretty prints the contents of a file. Syntax: bat <file>
• cat: Get the contents of a file. Syntax: cat <file>
• cd: Change the current working directory. Syntax: cd <directory>
• close: Closes the SMB connection to the remote machine. Syntax: close
• connect: Connect to the remote machine (useful if connection timed out). Syntax: connect
• dir: List the contents of the current working directory. Syntax: dir
• exit: Exits the smbclient-ng script. Syntax: exit
• get: Get a remote file. Syntax: get [-r] <directory or file>
• help: Displays this help message. Syntax: help
• info: Get information about the server and or the share. Syntax: info [server|share]
• lcd: Changes the current local directory. Syntax: lcd <directory>
• lls: Lists the contents of the current local directory. Syntax: lls
• lmkdir: Creates a new local directory. Syntax: lmkdir <directory>
• lpwd: Shows the current local directory. Syntax: lpwd
• lrm: Removes a local file. Syntax: lrm <file>
• lrmdir: Removes a local directory. Syntax: lrmdir <directory>
• ls: List the contents of the current remote working directory. Syntax: ls
• ltree: Displays a tree view of the local directories. Syntax: ltree [directory]
• mkdir: Creates a new remote directory. Syntax: mkdir <directory>
• module: Loads a specific module for additional functionalities. Syntax: module <name>
• put: Put a local file or directory in a remote directory. Syntax: put [-r] <directory or file>
• reconnect: Reconnect to the remote machine (useful if connection timed out). Syntax: reconnect
• reset: Reset the TTY output, useful if it was broken after printing a binary file on stdout. Syntax: reset
• rmdir: Removes a remote directory. Syntax: rmdir <directory>
• rm: Removes a remote file. Syntax: rm <file>
• shares: Lists the SMB shares served by the remote machine. Syntax: shares
• use: Use a SMB share. Syntax: use <sharename>
• tree: Displays a tree view of the remote directories. Syntax: tree [directory]

Install

python3 -m pip install smbclientng

Usage

$ smbclientng -h
               _          _ _            _                    
 ___ _ __ ___ | |__   ___| (_) ___ _ __ | |_      _ __   __ _ 
/ __| '_ ` _ \| '_ \ / __| | |/ _ \ '_ \| __|____| '_ \ / _` |
\__ \ | | | | | |_) | (__| | |  __/ | | | ||_____| | | | (_| |
|___/_| |_| |_|_.__/ \___|_|_|\___|_| |_|\__|    |_| |_|\__, |
    by @podalirius_                             v1.1.1  |___/  
    
usage: smbclientng [-h] [--debug] --target ip address [--kdcHost FQDN KDC] [-d DOMAIN] [-u USER]
                   [--no-pass | -p PASSWORD | -H [LMHASH:]NTHASH | --aes-key hex key] [-k]

smbclient-ng, a fast and user friendly way to interact with SMB shares.

options:
  -h, --help            show this help message and exit
  --debug               Debug mode
  --target ip address   IP Address of the SMB Server to connect to.

Authentication & connection:
  --kdcHost FQDN KDC    FQDN of KDC for Kerberos.
  -d DOMAIN, --domain DOMAIN
                        (FQDN) domain to authenticate to
  -u USER, --user USER  user to authenticate with

  --no-pass             Don't ask for password (useful for -k)
  -p PASSWORD, --password PASSWORD
                        password to authenticate with
  -H [LMHASH:]NTHASH, --hashes [LMHASH:]NTHASH
                        NT/LM hashes, format is LMhash:NThash
  --aes-key hex key     AES key to use for Kerberos Authentication (128 or 256 bits)
  -k, --kerberos        Use Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target parameters. If valid credentials
                        cannot be found, it will use the ones specified in the command line

Quick win commands

• Connect to a remote SMB server:

  ./smbclient-ng.py -u "Administrator" -d LAB -p 'Admin123!' --target "10.0.0.201"
  

Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.