Dancing
Last updated
Last updated
What does the 3-letter acronym SMB stand for? - Server Message Block
What port does SMB use to operate at? - 445
What network communication model does SMB use, architecturally speaking? - client-server model
What is the service name for port 445 that came up in our nmap scan? - microsoft-ds
What is the tool we use to connect to SMB shares from our Linux distribution? - smbclient
What is the flag or switch we can use with the SMB tool to list the contents of the share? - -L
Using smbclient -h we can find the flag/switch
What is the name of the share we are able to access in the end? - WorkShares
Running smbclient -L (IP) will list the shares, using a empty password
What is the command we can use within the SMB shell to download the files we find? - get
Submit root flag - 5f61c10dffbc77a704d76016a22f1664
First connect to the machine via SMB, smbclient '\\(IP)\WorkShares'
We can see two directories, Amy.J and James.P, we can ls both directories and see James has our flag. We can get our flag.txt and cat it on our machine to see our flag.
