SMB
Nmap scan revealed that a Windows directory service on port 139
and 445
Nmap was also able to enumerate the hostname of the target system; Chatterbox
, and OS version; Microsoft Windows 7 SP1 Professional
┌──(kali㉿kali)-[~/archive/htb/labs/chatterbox]
└─$ smbclient -L //$IP/
password for [workgroup\kali]:
Anonymous login successful
Sharename Type Comment
--------- ---- -------
Reconnecting with SMB1 for workgroup listing.
do_connect: Connection to 10.10.10.74 failed (Error NT_STATUS_RESOURCE_NAME_NOT_FOUND)
Unable to connect with SMB1 -- no workgroup available
Anonymous login is allowed on the SMB server, but listing is limited due to the lack of privileges
Nothing to do here without a valid credential