Enumerate Domain Shares

Technique Info

Enumerate SMB Shares with PowerHuntShares

Step 1 - Download PowerHuntShares

wget https://raw.githubusercontent.com/NetSPI/PowerHuntShares/refs/heads/main/PowerHuntShares.psm1

Step 2 - Obfuscate PowerHuntShares.psm1 See Powershell Script Obfuscation

Step 3 - Import Module and Run Command:

# Bypass execution policy restrictions
Set-ExecutionPolicy -Scope Process Bypass
# Import module that exists in the current directory
Import-Module .\PowerHuntShares.psm1
# run command (populate servers.txt with list of target IP addresses)
Invoke-HuntSMBShares -NoPing -OutputDirectory C:\Pentest -HostList C:\Pentest\servers.txt`

Related

Related Notes

All Related Notes

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "smb") OR contains(tags, "windows") OR contains(tags, "enumeration")
SORT file.ctime DESC

smb

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "smb")
SORT file.ctime DESC

windows

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "windows")
SORT file.ctime DESC

enumeration

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "enumeration")
SORT file.ctime DESC