Samba


Nmap discovered a Samba server on the target port 12445 The running service is Samba smbd 4

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hunit]
└─$ nmap --script smb-enum-shares -sV -p12445 $IP                       
Starting Nmap 7.95 ( https://nmap.org ) at 2025-03-30 20:15 CEST
Nmap scan report for 192.168.185.125
Host is up (0.022s latency).
 
PORT      STATE SERVICE     VERSION
12445/tcp open  netbios-ssn Samba smbd 4
 
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 54.32 seconds

Share mapping failed

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hunit]
└─$ nxc smb $IP --port 12445 -u '' -p '' --shares --interfaces   
SMB         192.168.185.125 12445  HUNIT            [*] Unix - Samba (name:HUNIT) (domain:) (signing:False) (SMBv1:False)
SMB         192.168.185.125 12445  HUNIT            [+] \: 
SMB         192.168.185.125 12445  HUNIT            [*] Enumerated shares
SMB         192.168.185.125 12445  HUNIT            Share           Permissions     Remark
SMB         192.168.185.125 12445  HUNIT            -----           -----------     ------
SMB         192.168.185.125 12445  HUNIT            Commander       READ,WRITE      Dademola Files
SMB         192.168.185.125 12445  HUNIT            IPC$                            IPC Service (Samba 4.13.2)

The target Samba server allows anonymous access Both read and write accesses are granted for the Commander share

Null Session


┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hunit]
└─$ smbclient //$IP/Commander -p 12445
Password for [WORKGROUP\kali]:
Anonymous login successful
Try "help" to get a list of possible commands.
smb: \>

Connection established

smb: \> put test 
putting file test as \test (0.0 kb/s) (average 0.0 kb/s)

Write access is confirmed

smb: \> ls
  .                                   D        0  Sun Mar 30 20:16:05 2025
  ..                                  D        0  Fri Jan 15 18:58:49 2021
  25_tailrec_function.kt              N      479  Fri Nov  6 19:11:16 2020
  30_abstract_class.kt                N      822  Fri Nov  6 19:11:16 2020
  48_lazy_keyword.kt                  N      861  Fri Nov  6 19:11:16 2020
  24_infix_function.kt                N      528  Fri Nov  6 19:11:16 2020
  52_let_scope_function.kt            N      545  Fri Nov  6 19:11:16 2020
  jOqCdgcmNK.txt                      A        0  Sun Mar 30 20:16:05 2025
  26_class_and_constructor.kt         N      470  Fri Nov  6 19:11:16 2020
  4_variables_data_types.kt           N      493  Fri Nov  6 19:11:16 2020
  40_arrays.kt                        N      469  Fri Nov  6 19:11:16 2020
  44_filter_map_sorting.kt            N      927  Fri Nov  6 19:11:16 2020
  6_kotlin_basics.kt                  N      163  Fri Nov  6 19:11:16 2020
  35_lambdas_higher_order_functions.kt      N     1190  Fri Nov  6 19:11:16 2020
  5_kotlin_basics.kt                  N      263  Fri Nov  6 19:11:16 2020
  43_set_hashset.kt                   N      498  Fri Nov  6 19:11:16 2020
  10_if_expression.kt                 N      372  Fri Nov  6 19:11:16 2020
  13_while_loop.kt                    N      301  Fri Nov  6 19:11:16 2020
  21_named_parameters.kt              N      251  Fri Nov  6 19:11:16 2020
  42_map_hashmap.kt                   N      601  Fri Nov  6 19:11:16 2020
  47_lateinit_keyword.kt              N      568  Fri Nov  6 19:11:16 2020
  41_list.kt                          N      704  Fri Nov  6 19:11:16 2020
  17_functions_basics.kt              N      171  Fri Nov  6 19:11:16 2020
  36_lambdas_example_two.kt           N      556  Fri Nov  6 19:11:16 2020
  myKotlinInteroperability.kt         N      228  Fri Nov  6 19:11:16 2020
  3_comments.kt                       N      217  Fri Nov  6 19:11:16 2020
  1_hello_world.kt                    N       80  Fri Nov  6 19:11:16 2020
  22_extension_function_one.kt        N      413  Fri Nov  6 19:11:16 2020
  51_also_scope_function.kt           N      882  Fri Nov  6 19:11:16 2020
  50_apply_scope_function.kt          N      663  Fri Nov  6 19:11:16 2020
  18_functions_as_expressions.kt      N      421  Fri Nov  6 19:11:16 2020
  45_predicate.kt                     N      646  Fri Nov  6 19:11:16 2020
  37_lambdas_closures.kt              N      358  Fri Nov  6 19:11:16 2020
  12_for_loop.kt                      N      257  Fri Nov  6 19:11:16 2020
  23_extension_function_two.kt        N      510  Fri Nov  6 19:11:16 2020
  10_default_functions.kt             N      226  Fri Nov  6 19:11:16 2020
  27_inheritance.kt                   N      762  Fri Nov  6 19:11:16 2020
  49_with_scope_function.kt           N      576  Fri Nov  6 19:11:16 2020
  6_Person.kt                         N      116  Fri Nov  6 19:11:16 2020
  46_null_safety.kt                   N     1075  Fri Nov  6 19:11:16 2020
  39_with_apply_functions.kt          N      447  Fri Nov  6 19:11:16 2020
  8_string_interpolation.kt           N      358  Fri Nov  6 19:11:16 2020
  31_interface.kt                     N     1048  Fri Nov  6 19:11:16 2020
  7_data_types.kt                     N      301  Fri Nov  6 19:11:16 2020
  28_overriding_methods_properties.kt      N      524  Fri Nov  6 19:11:16 2020
  2_explore_first_app.kt              N      183  Fri Nov  6 19:11:16 2020
  33_object_declaration.kt            N      795  Fri Nov  6 19:11:16 2020
  53_run_scope_function.kt            N      649  Fri Nov  6 19:11:16 2020
  15_break_keyword.kt                 N      365  Fri Nov  6 19:11:16 2020
  14_do_while.kt                      N      311  Fri Nov  6 19:11:16 2020
  32_data_class.kt                    N      351  Fri Nov  6 19:11:16 2020
  11_when_expression.kt               N      275  Fri Nov  6 19:11:16 2020
  38_it_keyword_lambdas.kt            N      427  Fri Nov  6 19:11:16 2020
  MyJavaFile.java                     N      297  Fri Nov  6 19:11:16 2020
  34_companion_object.kt              N      414  Fri Nov  6 19:11:16 2020
  16_continue_keyword.kt              N      362  Fri Nov  6 19:11:16 2020
  9_ranges.kt                         N      595  Fri Nov  6 19:11:16 2020
  29_inheritance_primary_secondary_constructor.kt      N      595  Fri Nov  6 19:11:16 2020

		15931284 blocks of size 1024. 11850060 blocks available

There appear to be a lot of Kotlin files for programming tutorial There are also 2 interesting files; jOqCdgcmNK.txt and MyJavaFile.java

jOqCdgcmNK.txt


smb: \> ls jOqCdgcmNK.txt
  jOqCdgcmNK.txt                      A        0  Sun Mar 30 20:16:05 2025
 
		15931284 blocks of size 1024. 11850060 blocks available
 
smb: \> allinfo jOqCdgcmNK.txt 
altname: JFVEKX~Y.TXT
create_time:    Sun Mar 30 20:16:06 2025 CEST
access_time:    Sun Mar 30 20:16:06 2025 CEST
write_time:     Sun Mar 30 20:16:06 2025 CEST
change_time:    Sun Mar 30 20:16:06 2025 CEST
attributes: A (20)
stream: [::$DATA], 0 bytes
NT_STATUS_INVALID_DEVICE_REQUEST getting shadow copy data for \jOqCdgcmNK.txt

The jOqCdgcmNK.txt file is empty

MyJavaFile.java


smb: \> more MyJavaFile.java
getting file \MyJavaFile.java of size 297 as /tmp/smbmore.mgu4Ci (2.5 KiloBytes/sec) (average 3.4 KiloBytes/sec)
/*
 *   Interoperability Example
 * */
public class MyJavaFile {
 
        public static void main(String[] args) {
 
                int sum = MyKotlinInteroperabilityKt.addNumbers(3, 4);
                System.out.println("Printing sum from Java file :" + sum);
        }
 
        public static int getArea(int l, int b) {
                return l * b;
        }
}

The MyJavaFile.java file contains a Java class for 2 simple arithmetic functions N/A